Is libsecp256k1 safe to use?

libsecp256k1 has 1 known vulnerabilities on the latest version (0.7.2). DepScope rates its health at 54/100 (high risk).

What is the latest version of libsecp256k1?

The latest version of libsecp256k1 is 0.7.2, released 2025-03-14.

Yes. libsecp256k1 has 1 known vulnerabilities. See depscope.dev/pkg/cargo/libsecp256k1 for details.

No, libsecp256k1 is actively maintained. Latest release: 0.7.2 (2025-03-14).

Popular alternatives to libsecp256k1 in Cargo include: hashbrown, getrandom, windows-sys, syn.

libsecp256k1 is licensed under Apache-2.0.

cargov0.7.2

Pure Rust secp256k1 implementation.

License Apache-2.0permissive29 versions0 deps3,690,873 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 54/100)

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

0/15

community

Vulnerabilities

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
unknown	RUSTSEC-2025-0161	libsecp256k1 is unmaintained	—

Quality signals

OSS Criticality

0.69high

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/libsecp256k1