advisory-db/crates/failure/RUSTSEC-2020-0036.md

[advisory]
id = "RUSTSEC-2020-0036"
package = "failure"
date = "2020-05-02"
informational = "unmaintained"
url = "https://github.com/rust-lang-nursery/failure/pull/347"
aliases = ["CVE-2020-25575"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"

[versions]
patched = []
unaffected = []

failure is officially deprecated/unmaintained

The failure crate is officially end-of-life: it has been marked as deprecated by the former maintainer, who has announced that there will be no updates or maintenance work on it going forward.

The following are some suggested actively developed alternatives to switch to:

• anyhow
• eyre
• fehler
• snafu
• thiserror