FuelLabs/fuel-core

RUSTSEC-2025-0057: fxhash - no longer maintained

Open

#3093 opened on Sep 6, 2025

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Rust (57,084 stars) (2,861 forks)batch import
good first issue

Description

fxhash - no longer maintained

Details
Status unmaintained
Package fxhash
Version 0.2.1
URL https://github.com/cbreeden/fxhash/issues/20
Date 2025-09-05

The fxhash crate is no longer maintained.

The repository is stale and owner is no longer active on GitHub.

Please take a look at rustc-hash instead.


See [advisory page](https://rustsec.org/advisories/RUSTSEC-2025-0057.html) for additional details.

Contributor guide

Tech stack
rust
Domain
backendsecurity
Issue type
security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Rust programmingCargo dependency management
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Replace the unmaintained fxhash crate with rustc hash throughout the codebase. Locate all occurrences of fxhash in Cargo.toml and source files (likely in multiple modules). Update dependency in Cargo.toml, then replace all imports and function calls with the equivalent from rustc hash. Ensure the build passes and all tests succeed. Consult the advisory at https://rustsec.org/advisories/RUSTSEC 2025-0057.html for details.