{"id":"RUSTSEC-2025-0036","aliases":[],"status":"published","title":"surf is unmaintained","description":"The developer has indicated that the crate is unmaintained.\n\nThe last release is over three years old (from 2021), the crate depends on the\ndeprecated `async-std` crate and on a very old version of `rustls` for TLS\nsupport.\n\n## Possible alternatives\n\n- [reqwest](https://crates.io/crates/reqwest)\n- [ureq](https://crates.io/crates/ureq)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-05-17T12:00:00Z","modified":"2025-05-17T13:43:35Z","affected":[{"source":"osv","ecosystem":"crates.io","package":"surf","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://crates.io/crates/surf","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0036.html","tags":["advisory"]},{"url":"https://github.com/http-rs/surf/issues/352","tags":["report"]}],"sources":{"osv":[{"id":"RUSTSEC-2025-0036","title":"surf is unmaintained","description":"The developer has indicated that the crate is unmaintained.\n\nThe last release is over three years old (from 2021), the crate depends on the\ndeprecated `async-std` crate and on a very old version of `rustls` for TLS\nsupport.\n\n## Possible alternatives\n\n- [reqwest](https://crates.io/crates/reqwest)\n- [ureq](https://crates.io/crates/ureq)","status":"published","published":"2025-05-17T12:00:00Z","modified":"2025-05-17T13:43:35Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}