iotaledger / iotaledger/notarization

RUSTSEC-2026-0283: clear_on_drop is unmaintained

Open
#344 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
5
Forks
7
Avg merge
10h 34m
Merged PRs (30d)
11

Description

> clear_on_drop is unmaintained

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unmaintained |
| Package | `clear_on_drop` |
| Version | `0.2.5` |
| URL | [https://github.com/cesarb/clear_on_drop/commit/5916d6260acbad8a34290dba137f39963f13f467](https://github.com/cesarb/clear_on_drop/commit/5916d6260acbad8a34290dba137f39963f13f467) |
| Date | 2026-09-13 |

This crate is no longer maintained. Use the [zeroize](https://crates.io/crates/zeroize) crate instead.

* Instead of `ClearOnDrop`, use `Zeroizing`
* Instead of `clear_stack`, use `zeroize_stack`

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0283.html) for additional details.

Contributor guide

Open the contributing guide

Research direction

Start by searching the repository for the clear_on_drop dependency and its ClearOnDrop or clear_stack usages. Review the Cargo manifests and affected Rust code, then replace the referenced APIs with the zeroize equivalents. Done means the unmaintained package is no longer used and the project’s tests pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.