maven package report

Is zeroize_derive safe?

1 known vulnerability.

cvss
not scored

how bad it is if exploited, out of 10

epss
1.2%

chance of exploitation in the next 30 days

xyz score
4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-c5hx-w945-j4pq, the advisory selected below

// advisories

GHSA-c5hx-w945-j4pq

UNKNOWNCVE-2021-45706

Affected versions of this crate did not implement Drop when #[zeroize(drop)] was used on an enum.

Affected
>=0.0.0-0, <1.1.1
Fixed in
1.1.1
Published
2022-01-06
Source
github

GHSANVDMITRE


// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.


Checked 2026-09-22 at 03:30 UTC. The most recent advisory here was published 2022-01-06. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is zeroize_derive safe? maven package security report | CyberXYZ