RUSTSEC-2026-0192
`ttf-parser` is unmaintained
No score
The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes (see the referenced issue).
Alternative(s)
skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" (fontations) project.
What each source reports
OSV No score
`ttf-parser` is unmaintained
The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes (see the referenced issue).
Alternative(s)
skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" (fontations) project.
- Record
RUSTSEC-2026-0192- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ttf-parsercrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0192 is a vulnerability with no CVSS score yet in ttf-parser, published June 28, 2026. No source lists public exploit code. No source names a fixed version.