—
RUSTSEC-2025-0036
surf is unmaintained
Details
The developer has indicated that the crate is unmaintained.
The last release is over three years old (from 2021), the crate depends on the deprecated `async-std` crate and on a very old version of `rustls` for TLS support.
## Possible alternatives
- [reqwest](https://crates.io/crates/reqwest) - [ureq](https://crates.io/crates/ureq)
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/surf
Introduced in:
0.0.0-0No fixed version published yet for surf. Pin to a known-safe version or switch to an alternative.