AIKIDO-2024-10530
gtk is vulnerable to Use of Unmaintained Third Party Components
60
Medium Risk
This Affects:
gtkTL;DR
The gtk-rs GTK3 bindings are no longer maintained, as the maintainers have archived the repository and added a note to the crate descriptions and their README.md files indicating deprecation. Affected packages include gtk-sys, gtk3-macros, gdk-sys, gdkx11, gdkx11-sys, atk-sys, atk, gtk, gdk, gdkwayland-sys, gdkwayland, gtk-layer-shell-sys, and gtk-layer-shell. Users are advised to migrate to GTK4 bindings where possible.
Who does this affect?
You are affected if you are using this package.
Background info
gtk is vulnerable to Use of Unmaintained Third Party Components in all versions.
How to fix this
Remove any GTK3 package from your application. Please take a look at gtk4-rs instead.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant