Skip to content

RUSTSEC-2025-0134: rustls-pemfile is unmaintained #772

@github-actions

Description

@github-actions

rustls-pemfile is unmaintained

Details
Status unmaintained
Package rustls-pemfile
Version 1.0.4
URL rustls/pemfile#61
Date 2025-11-28

The rustls-pemfile crate is no longer maintained. The repository has been archived since August
2025, and users are encouraged to depend directly on the underlying PEM parsing code included
in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper
around the same code used in rustls-pki-types, so migrating should be straightforward.

The new API is represented by the PemObject trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.

See advisory page for additional details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesPull requests that update a dependency file

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions