—

RUSTSEC-2025-0010

Versions of *ring* prior to 0.17 are unmaintained.

Details

*ring* 0.16.20 was released over 4 years ago and isn't maintained, tested, etc.

Additionally, the project's general policy is to only patch the latest release, which is 0.17.12 now. It will be difficult for anybody to backport future fixes to versions earlier than 0.17.10 due to license changes.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/ring

Introduced in: 0.0.0-0Fixed in: 0.17.0

Upgrade ring to 0.17.0 or newer (ecosystem crates.io).

References

https://crates.io/crates/ring[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2025-0010.html[ADVISORY]
https://github.com/briansmith/ring/discussions/2450[WEB]