The surf crate is unmaintained, and all versions are affected.
For alternatives, consider using reqwest or ureq.
See this issue for more context.
{ "license": "CC0-1.0" }
{ "affected_functions": null, "affects": { "os": [], "functions": [], "arch": [] } }
null
"unmaintained"
[]
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0169.json"