Skip to content

security issue: crate is affected by RUSTSEC-2025-0141 #57

Description

@ilka-schulz

This crate is affected by Rust Security Advisory RUSTSEC-2025-0141:

$ cargo deny check
[...]
error[unmaintained]: Bincode is unmaintained
  ┌─ /home/user/procspawn/Cargo.lock:4:1
  │
4 │ bincode 1.3.3 registry+https://github.com/rust-lang/crates.io-index
  │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
  │
  ├ ID: RUSTSEC-2025-0141
  ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2025-0141
  ├ Due to a doxxing and harassment incident, the bincode team has taken the decision to cease development permanently.
    
    The team considers version 1.3.3 a complete version of bincode that is not in need of any updates.
    
    ## Alternatives to consider
    
    * [wincode](https://crates.io/crates/wincode)
    * [postcard](https://crates.io/crates/postcard)
    * [bitcode](https://crates.io/crates/bitcode)
    * [rkyv](https://crates.io/crates/rkyv)
  ├ Announcement: https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md
  ├ Solution: No safe upgrade is available!
  ├ bincode v1.3.3
    └── ipc-channel v0.18.3
        └── procspawn v1.0.1

advisories FAILED, bans ok, licenses FAILED, sources ok

The following PRs appear to address the issue:

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions