AIKIDO-2025-10290
tanton_engine is vulnerable to Use of Unmaintained Third Party Components
30
CVE Score
Low
Use of Unmaintained Third Party Components
TL;DR
Certain functions in the tanton_engine crate are unsound due to lack of sufficient boundary checks in public API. The tanton_engine crate is no longer maintained, so there are no plans to fix this issue.
How do I fix this?
Remove any tanton_engine package from your application.
Who does this affect?
You are affected if you are using this package.
Package
Versions
0.0.0 - *
No fix availableBackground info
tanton_engine is vulnerable to Use of Unmaintained Third Party Components in all versions.
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.