Tracked for PyPI packages. HuggingFace models declare Python dependencies, so cargo packages are not covered.
cvss
not scored
severity out of 10
epss
not scored
chance of exploitation in 30 days
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — RUSTSEC-2019-0032, the advisory selected below
// 1 advisories
RUSTSEC-2019-0032
UNKNOWN
The crust crate repo was archived with no warning or explanation.
Given that it was archived with no warning or successor, there's not an official replacement but rust-libp2p looks like it's got a similar feature set and is actively maintained.
Checked 2026-10-04 at 01:10 UTC. The most recent advisory here was published 2019-11-21. Updated continuously from NVD, GHSA, OSV and CNA feeds.