{"id":"RUSTSEC-2026-0192","aliases":[],"status":"published","title":"`ttf-parser` is unmaintained","description":"The author of `ttf-parser` has stated that the crate is unmaintained and will not receive further fixes (see the referenced issue).\n\n## Alternative(s)\n\n- [`skrifa`](https://crates.io/crates/skrifa), an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts \"oxidize\" (`fontations`) project.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-06-28T12:00:00Z","modified":"2026-06-29T21:15:04Z","affected":[{"source":"osv","ecosystem":"crates.io","package":"ttf-parser","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://crates.io/crates/ttf-parser","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0192.html","tags":["advisory"]},{"url":"https://github.com/harfbuzz/ttf-parser/issues/217","tags":["report"]}],"sources":{"osv":[{"id":"RUSTSEC-2026-0192","title":"`ttf-parser` is unmaintained","description":"The author of `ttf-parser` has stated that the crate is unmaintained and will not receive further fixes (see the referenced issue).\n\n## Alternative(s)\n\n- [`skrifa`](https://crates.io/crates/skrifa), an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts \"oxidize\" (`fontations`) project.","status":"published","published":"2026-06-28T12:00:00Z","modified":"2026-06-29T21:15:04.384453633Z","updated_at":"2026-11-02T15:53:40.430679Z"}]}}