RUSTSEC-2025-0134: rustls-pemfile is unmaintained #4557
Description
rustls-pemfile is unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | rustls-pemfile |
| Version | 2.2.0 |
| URL | rustls/pemfile#61 |
| Date | 2025-11-28 |
The rustls-pemfile crate is no longer maintained. The repository has been archived since August
2025, and users are encouraged to depend directly on the underlying PEM parsing code included
in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper
around the same code used in rustls-pki-types, so migrating should be straightforward.
The new API is represented by the PemObject trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.
See advisory page for additional details.