UnmaintainedRUSTSEC-2024-0436 · paste
RUSTSEC-2024-0436: paste - no longer maintained
Short answerNot a bug report: paste is no longer maintained, so future security issues will not be fixed. Plan to move to a maintained alternative.
| Crate | paste |
|---|---|
| Type | Unmaintained |
| Affected versions | Every version. |
| Fixed in | not applicable (the crate is unmaintained) |
| Severity | not scored |
| Published | 2024-10-07 |
| Last changed | 2026-01-27 |
| Also known as | none |
What to do
- Look for a maintained fork or alternative crate.
- If you cannot move yet, acknowledge it in your audit config so CI stays green while you plan: add
"RUSTSEC-2024-0436"toignorein.cargo/audit.tomlordeny.toml, with a comment saying why. - Find who pulls it in:
cargo tree -i paste.
Details from the advisory
The creator of the crate paste has stated in the README.md that this project is not longer maintained as well as archived the repository
Possible Alternative(s)
pastey: a fork of paste and is aimed to be a drop-in replacement with additional features for paste cratewith_builtin_macros: crate providing a superset ofpaste's functionality including generalmacro_rules!eager expansions andconcat!/concat_idents!macros
References
- Package: crates.io/crates/paste
- Advisory: rustsec.org/advisories/RUSTSEC-2024-0436.html
- Web: github.com/dtolnay/paste
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Up next
Same cratepaste: security historyEvery advisory for this crate, and whether it is safe to use today.Read it next →Did this answer your question?