Skip to content
OpenAdvisories
Unscored RUSTSEC-2021-0133

cargo-download is unmaintained

Published Dec 25, 2021 · Updated Dec 25, 2021 · Assigned by RUSTSEC

Description

The cargo download subcommand (via cargo-download crate) is broken and maintainer has disappeared from GitHub and hasn't had any commits for a year.

Using this downloader will result to corrupted crates.

Maintainer has not responded to maintenance takeover.

Just use wget / curl directly.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io cargo-download >= 0.0.0-0 — RUSTSEC-2021-0133

References