RUSTSEC-2025-0134
rustls-pemfile is unmaintained
The rustls-pemfile crate is no longer maintained. The repository has been archived since August 2025, and users are encouraged to depend directly on the underlying PEM parsing code included in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper around the same code used in rustls-pki-types, so migrating should be straightforward.
The new API is represented by the PemObject trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.
What each source reports
OSV No score
rustls-pemfile is unmaintained
The rustls-pemfile crate is no longer maintained. The repository has been archived since August 2025, and users are encouraged to depend directly on the underlying PEM parsing code included in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper around the same code used in rustls-pki-types, so migrating should be straightforward.
The new API is represented by the PemObject trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.
- Record
RUSTSEC-2025-0134- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rustls-pemfilecrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2025-0134 is a vulnerability with no CVSS score yet in rustls-pemfile, published November 28, 2025. No source lists public exploit code. No source names a fixed version.