Tracked for PyPI packages. HuggingFace models declare Python dependencies, so cargo packages are not covered.
cvss
not scored
severity out of 10
epss
not scored
chance of exploitation in 30 days
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — RUSTSEC-2024-0397, the advisory selected below
// 1 advisories
RUSTSEC-2024-0397
UNKNOWN
The crate conrod has been [deprecated] since version 0.62.0 released in December 2018. The functionality was split across multiple different crates, with the core functionality being transferred to conrodcore. An overview can be found in the [conrod repository].
If you have this crate in your dependency tree, this is very likely by mistake and should be corrected.