—

RUSTSEC-2024-0004

`cosmwasm` is unmaintained

Details

The crate `cosmwasm` is [not used anymore] since spring 2020. The functionality was split in multiple different crates, such as the standard library `cosmwasm-std` and the virtual machine `cosmwasm-vm`. An overview can be found in the [cosmwasm repository].

If you have this crate in your dependency tree, this is very likely by mistake and should be corrected.

[not used anymore]: https://github.com/CosmWasm/cosmwasm/issues/1430 [cosmwasm repository]: https://github.com/CosmWasm/cosmwasm

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/cosmwasm

Introduced in: 0.0.0-0

No fixed version published yet for cosmwasm. Pin to a known-safe version or switch to an alternative.

References

https://crates.io/crates/cosmwasm[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2024-0004.html[ADVISORY]
https://github.com/CosmWasm/cosmwasm/issues/1430[REPORT]