RUSTSEC-2025-0025
rustc-serialize is unmaintained
rustc-serialize will no longer be maintained as declared by the developer. By fuzzing the package, we can identify multiple vulnerabilities.
The project has been archived and cannot submit issues. The developer has recommended using the serde crate instead.
What each source reports
OSV No score
rustc-serialize is unmaintained
rustc-serialize will no longer be maintained as declared by the developer. By fuzzing the package, we can identify multiple vulnerabilities.
The project has been archived and cannot submit issues. The developer has recommended using the serde crate instead.
- Record
RUSTSEC-2025-0025- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rustc-serializecrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2025-0025 is a vulnerability with no CVSS score yet in rustc-serialize, published April 28, 2025. No source lists public exploit code. No source names a fixed version.