RUSTSEC-2026-0192

Source
https://rustsec.org/advisories/RUSTSEC-2026-0192
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0192.json
JSON Data
https://api.test.osv.dev/v1/vulns/RUSTSEC-2026-0192
Published
2026-06-28T12:00:00Z
Modified
2026-06-29T21:15:04.510209557Z
Summary
`ttf-parser` is unmaintained
Details

The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes (see the referenced issue).

Alternative(s)

  • skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" (fontations) project.
Database specific
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / ttf-parser

Package

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "functions": [],
        "os": [],
        "arch": []
    }
}

Database specific

source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0192.json"
cvss
null
informational
"unmaintained"
categories
[]