Skip to content
OpenAdvisories
Unscored RUSTSEC-2025-0036

surf is unmaintained

Published May 17, 2025 · Updated May 17, 2025 · Assigned by RUSTSEC

Description

The developer has indicated that the crate is unmaintained.

The last release is over three years old (from 2021), the crate depends on the
deprecated `async-std` crate and on a very old version of `rustls` for TLS
support.

## Possible alternatives

- [reqwest](https://crates.io/crates/reqwest)
- [ureq](https://crates.io/crates/ureq)

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io surf >= 0.0.0-0 — RUSTSEC-2025-0036

References