RUSTSEC-2026-0150
audiopus_sys is unmaintained
audiopus_sys is implicitly unmaintained and holds a reference to CMake versions with which CMake 4.0 is not backwards compatible, causing cargo builds to error. An effort to contact the maintainer was made on June 10th, 2025 with no reply. A separate 2025 PR was made (from a different user) addressing the CMake 4.0 issue with no reply. The last commit to audiopus_sys is dated 5 years ago.
What each source reports
OSV No score
audiopus_sys is unmaintained
audiopus_sys is implicitly unmaintained and holds a reference to CMake versions with which CMake 4.0 is not backwards compatible, causing cargo builds to error. An effort to contact the maintainer was made on June 10th, 2025 with no reply. A separate 2025 PR was made (from a different user) addressing the CMake 4.0 issue with no reply. The last commit to audiopus_sys is dated 5 years ago.
- Record
RUSTSEC-2026-0150- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
audiopus_syscrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0150 is a vulnerability with no CVSS score yet in audiopus_sys, published May 21, 2026. No source lists public exploit code. No source names a fixed version.