RUSTSEC-2025-0036
surf is unmaintained
No score
The developer has indicated that the crate is unmaintained.
The last release is over three years old (from 2021), the crate depends on the
deprecated async-std crate and on a very old version of rustls for TLS
support.
Possible alternatives
What each source reports
OSV No score
surf is unmaintained
The developer has indicated that the crate is unmaintained.
The last release is over three years old (from 2021), the crate depends on the
deprecated async-std crate and on a very old version of rustls for TLS
support.
Possible alternatives
- Record
RUSTSEC-2025-0036- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
surfcrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2025-0036 is a vulnerability with no CVSS score yet in surf, published May 17, 2025. No source lists public exploit code. No source names a fixed version.