Loading story…
The upstream GitHub repository for the Rust stack-graphs package has been archived, and its GitHub Issues and pull Requests are disabled, preventing users from contacting maintainers through the project repository. RustSec tracks the condition as RUSTSEC-2026-0303.
The latest crates.io release is stack-graphs 0.14.1, published in December 2024; the repository was last updated in September 2025. No maintained successor or patched release has been published, so organizations using the package for incremental name-resolution functionality should assess dependency exposure and plan to replace, fork, or otherwise maintain it internally.
Map this exposure pattern across your cloud, code, and identities.
3 events from the most recent confirmed update back to the earliest known activity.
RustSec issued RUSTSEC-2026-0303 after the upstream repository was archived, with Issues and pull requests disabled. The advisory reported no successor or patched version, leaving stack-graphs unmaintained.
The github/stack-graphs upstream repository recorded its last push on this date.
Version 0.14.1, the most recent crates.io release of stack-graphs, was published.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.