{
  "affected": [
    {
      "database_specific": {
        "categories": [],
        "cvss": null,
        "informational": "unmaintained"
      },
      "ecosystem_specific": {
        "affected_functions": null,
        "affects": {
          "arch": [],
          "functions": [],
          "os": []
        }
      },
      "package": {
        "ecosystem": "crates.io",
        "name": "ring",
        "purl": "pkg:cargo/ring"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.0.0-0"
            },
            {
              "fixed": "0.17.0"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "versions": []
    }
  ],
  "aliases": [],
  "database_specific": {
    "license": "CC0-1.0"
  },
  "details": "*ring* 0.16.20 was released over 4 years ago and isn\u0027t maintained, tested, etc.\n\nAdditionally, the project\u0027s general policy is to only patch the latest release,\nwhich is 0.17.12 now. It will be difficult for anybody to backport future fixes\nto versions earlier than 0.17.10 due to license changes.",
  "id": "RUSTSEC-2025-0010",
  "modified": "2025-03-07T15:46:47Z",
  "published": "2025-03-05T12:00:00Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://crates.io/crates/ring"
    },
    {
      "type": "ADVISORY",
      "url": "https://rustsec.org/advisories/RUSTSEC-2025-0010.html"
    },
    {
      "type": "WEB",
      "url": "https://github.com/briansmith/ring/discussions/2450"
    }
  ],
  "related": [],
  "severity": [],
  "summary": "Versions of *ring* prior to 0.17 are unmaintained."
}