{"id":"RUSTSEC-2025-0134","summary":"rustls-pemfile is unmaintained","details":"The rustls-pemfile crate is no longer maintained. The repository has been archived since August\n2025, and users are encouraged to depend directly on the underlying PEM parsing code included\nin rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper\naround the same code used in rustls-pki-types, so migrating should be straightforward.\n\nThe new API is represented by the [`PemObject`][PemObject] trait, which provides methods for\nreading a single or multiple PEM objects from a file or byte slice.\n\n[PemObject]: https://docs.rs/rustls-pki-types/latest/rustls_pki_types/pem/trait.PemObject.html","modified":"2025-12-05T19:07:59.622592Z","published":"2025-11-28T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/rustls-pemfile"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2025-0134.html"},{"type":"REPORT","url":"https://github.com/rustls/pemfile/issues/61"}],"affected":[{"package":{"name":"rustls-pemfile","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}],"ecosystem_specific":{"affects":{"arch":[],"functions":[],"os":[]},"affected_functions":null},"database_specific":{"informational":"unmaintained","source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0134.json","cvss":null,"categories":[]}}],"schema_version":"1.7.3"}