Skip to content
OpenAdvisories
Unscored RUSTSEC-2025-0134

rustls-pemfile is unmaintained

Published Nov 28, 2025 · Updated Dec 5, 2025 · Assigned by RUSTSEC

Description

The rustls-pemfile crate is no longer maintained. The repository has been archived since August
2025, and users are encouraged to depend directly on the underlying PEM parsing code included
in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper
around the same code used in rustls-pki-types, so migrating should be straightforward.

The new API is represented by the [`PemObject`][PemObject] trait, which provides methods for
reading a single or multiple PEM objects from a file or byte slice.

[PemObject]: https://docs.rs/rustls-pki-types/latest/rustls_pki_types/pem/trait.PemObject.html

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io rustls-pemfile >= 0.0.0-0 — RUSTSEC-2025-0134

References