Intel

AIKIDO-2026-10595

tokio-reactor is vulnerable to Use of Unmaintained Third Party Components

Use of Unmaintained Third Party Components Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Apr 27, 2026

50

Medium Risk

This Affects:

rusttokio-reactor
0.0.0 - *
Are you affected? Scan for Free

TL;DR

The tokio-reactor package will no longer be maintained.

Who does this affect?

You are affected if you are using this package.

Background info

tokio-reactor is vulnerable to Use of Unmaintained Third Party Components in all versions.

How to fix this

Remove any tokio-reactor package from your application. Please take a look at tokio as an alternative.