cvss

Releases

1. ▸▾3.0.024 Sept 2026

   gate the v3/v4 versions of MetricType by @alexanderkjall in #1472

   What's Changed

   • gate the v3/v4 versions of MetricType by @alexanderkjall in #1472
   • cvss: use cargo hack to test feature combos by @tarcieri in #1473
   • feat: support for CVSSv2 by @oxisto in #1465
   • cvss: align EPSILON with its documented value by @gronke in #1660
   • cvss: round v2 ties half up and floor published scores at zero by @gronke in #1662
   • cvss: v2 docs and changelog catch-up by @gronke in #1663
   • cvss: check all three v2 scores across all Red Hat corpora by @gronke in #1664
   • cvss: fix wrong CVSS version in error messages by @gkamathe in #1665
   • Reject duplicate metrics in CVSSv3 parser by @gkamathe in #1669
   • cvss: add unit tests for v3 Score methods by @gkamathe in #1666
   • feat: rework CVSS 3.x and introduce temporal and environmental metrics and scores by @oxisto in #1468
   • cvss: prepare 3.0.0 release by @djc in #1705
   • cvss: drop some keywords by @djc in #1707

• platformscrates.ioRust platform registry with information about valid Rust platforms (target triple, target_arch, target_os) sourced from the Rust compiler.
• cargo-lockcrates.ioSelf-contained Cargo.lock parser with optional dependency graph analysis
• rustseccrates.ioClient library for the RustSec security advisory database
• cargo-auditcrates.ioAudit Cargo.lock for crates with security vulnerabilities
• quitterscrates.ioList dependencies of a Rust binary by parsing panic messages