Rust advisories / chan
UnmaintainedRUSTSEC-2018-0014 · chan
RUSTSEC-2018-0014: chan is end-of-life; use crossbeam-channel instead
Short answerNot a bug report: chan is no longer maintained, so future security issues will not be fixed. The advisory points to crossbeam-channel as the replacement.
| Crate | chan |
|---|---|
| Type | Unmaintained |
| Affected versions | Before 0.1.24. |
| Fixed in | not applicable (the crate is unmaintained) |
| Severity | not scored |
| Published | 2018-07-31 |
| Last changed | 2020-10-02 |
| Also known as | none |
What to do
- Move to crossbeam-channel (our data on it).
- If you cannot move yet, acknowledge it in your audit config so CI stays green while you plan: add
"RUSTSEC-2018-0014"toignorein.cargo/audit.tomlordeny.toml, with a comment saying why. - Find who pulls it in:
cargo tree -i chan.
Details from the advisory
**chan has reached its end-of-life and is now deprecated.**
The intended successor of this crate is crossbeam-channel. Its API is strikingly similar, but comes with a much better select! macro, better performance, a better test suite and an all-around better implementation.
References
- Package: crates.io/crates/chan
- Advisory: rustsec.org/advisories/RUSTSEC-2018-0014.html
- Web: github.com/BurntSushi/chan/commit/0a5c0d4ad4adc90a54ee04a427389acf2e157275
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Up next
Are you affected?Check your whole dependency treePaste Cargo.lock: every advisory, for your exact versions.Read it next →Also worth your time
Did this answer your question?