Tracked for PyPI packages. HuggingFace models declare Python dependencies, so cargo packages are not covered.
cvss
not scored
severity out of 10
epss
not scored
chance of exploitation in 30 days
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — RUSTSEC-2021-0060, the advisory selected below
// 1 advisories
RUSTSEC-2021-0060
UNKNOWN
Please use the aes crate going forward. The new repository location is at:
AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation.
To force the use of a constant-time portable implementation on these platforms, even if AES-NI is available, use the new force-soft feature of the aes crate to disable autodetection.
Checked 2026-10-04 at 01:10 UTC. The most recent advisory here was published 2021-04-29. Updated continuously from NVD, GHSA, OSV and CNA feeds.