cargo package report

Is buf_redux safe?

1 known vulnerability.

// reach

0 direct dependencies

none carry a known advisory

0 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so cargo packages are not covered.

cvss

not scored

severity out of 10

epss

not scored

chance of exploitation in 30 days

xyz score

not scored

CyberXYZ composite out of 10

fig. 01 — RUSTSEC-2023-0028, the advisory selected below

// 1 advisories

RUSTSEC-2023-0028

UNKNOWN

Last release was over three years ago.

The maintainer(s) have been unreachable to respond to any issues that may or may not include security issues.

The repository is now archived and there is no security policy in place to contact the maintainer(s) otherwise.

The safety-undocumented unsafe in the crate may or may not be safe to use.

The crate also has a current future incompatibility warning bufredux/23.

// possible alternatives

The below may or may not provide alternative(s)

Rust alloc / std vec::Vec, collections::VecDeque
buffer-redux - fork
bytes
crates.io search for 'buffer'

Checked 2026-10-04 at 01:10 UTC. The most recent advisory here was published 2023-01-24. Updated continuously from NVD, GHSA, OSV and CNA feeds.