RUSTSEC-2025-0010
Versions of *ring* prior to 0.17 are unmaintained.
ring 0.16.20 was released over 4 years ago and isn't maintained, tested, etc.
Additionally, the project's general policy is to only patch the latest release, which is 0.17.12 now. It will be difficult for anybody to backport future fixes to versions earlier than 0.17.10 due to license changes.
What each source reports
OSV No score
Versions of *ring* prior to 0.17 are unmaintained.
ring 0.16.20 was released over 4 years ago and isn't maintained, tested, etc.
Additionally, the project's general policy is to only patch the latest release, which is 0.17.12 now. It will be difficult for anybody to backport future fixes to versions earlier than 0.17.10 due to license changes.
- Record
RUSTSEC-2025-0010- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ringcrates.io |
0.0.0-0 up to 0.17.0 | 0.17.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2025-0010 is a vulnerability with no CVSS score yet in ring, published March 5, 2025. No source lists public exploit code. Fixed in ring 0.17.0.