RUSTSEC-2026-0251

sized-chunks is unmaintained

Not rated yet crates.io

Severity: Not rated yet; No source has published a CVSS score yet
Exploit chance (EPSS): —; No score published
Known exploited: No; Not in CISA's catalog
Weakness: —; Not classified
Fix: None yet; No fixed version published

Description

The sized-chunks crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03.

Recommended alternative:

imbl-sized-chunks, a popular fork of this crate

Affected versions

crates.io

Package	Vulnerable	Fixed in
sized-chunks	`>= 0.0.0-0`	No fix yet

How to fix

No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.

References

Advisories

rustsec.org/advisories/RUSTSEC-2026-0251.html

Packages

crates.io/crates/sized-chunks

Timeline

May 3, 2026 Published
Aug 10, 2026 Last updated by the source

Advisory	Severity	Why it's related
RUSTSEC-2026-0255 Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free)	Not rated yet	Also affects sized-chunks
GHSA-fqpx-cq8x-9wp4 Array size is not checked in sized-chunks	High	Also affects sized-chunks

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor