{"id":"RUSTSEC-2021-0133","aliases":[],"status":"published","title":"cargo-download is unmaintained","description":"The cargo download subcommand (via cargo-download crate) is broken and maintainer has disappeared from GitHub and hasn't had any commits for a year. \n\nUsing this downloader will result to corrupted crates.\n\nMaintainer has not responded to maintenance takeover.\n\nJust use wget / curl directly.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-12-25T12:00:00Z","modified":"2021-12-25T18:20:22Z","affected":[{"source":"osv","ecosystem":"crates.io","package":"cargo-download","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://crates.io/crates/cargo-download","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0133.html","tags":["advisory"]},{"url":"https://github.com/Xion/cargo-download","tags":["web"]}],"sources":{"osv":[{"id":"RUSTSEC-2021-0133","title":"cargo-download is unmaintained","description":"The cargo download subcommand (via cargo-download crate) is broken and maintainer has disappeared from GitHub and hasn't had any commits for a year. \n\nUsing this downloader will result to corrupted crates.\n\nMaintainer has not responded to maintenance takeover.\n\nJust use wget / curl directly.","status":"published","published":"2021-12-25T12:00:00Z","modified":"2021-12-25T18:20:22Z","updated_at":"2026-11-02T15:53:39.492624Z"}]}}