RUSTSEC-2026-0169
surf is unmaintained
No score
The surf crate is unmaintained, and all versions are affected.
For alternatives, consider using reqwest or ureq.
See this issue for more context.
What each source reports
OSV No score
surf is unmaintained
The surf crate is unmaintained, and all versions are affected.
For alternatives, consider using reqwest or ureq.
See this issue for more context.
- Record
RUSTSEC-2026-0169- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
surfcrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0169 is a vulnerability with no CVSS score yet in surf, published June 4, 2026. No source lists public exploit code. No source names a fixed version.