Is risc0-zkos-v1compat safe to use?

risc0-zkos-v1compat has 1 known vulnerabilities on the latest version (2.2.2). DepScope rates its health at 40/100 (high risk).

What is the latest version of risc0-zkos-v1compat?

The latest version of risc0-zkos-v1compat is 2.2.2, released 2026-02-03.

Does risc0-zkos-v1compat have known vulnerabilities?

Yes. risc0-zkos-v1compat has 1 known vulnerabilities. See depscope.dev/pkg/cargo/risc0-zkos-v1compat for details.

Is risc0-zkos-v1compat deprecated?

No, risc0-zkos-v1compat is actively maintained. Latest release: 2.2.2 (2026-02-03).

What are alternatives to risc0-zkos-v1compat?

Popular alternatives to risc0-zkos-v1compat in Cargo include: hashbrown, getrandom, windows-sys, syn.

What license does risc0-zkos-v1compat use?

risc0-zkos-v1compat is licensed under Apache-2.0.

risc0-zkos-v1compat

cargov2.2.2

RISC Zero zero-knowledge VM kernel for v1 compatibility

License Apache-2.0permissive14 versions0 deps171,389 weekly dl

risc0/risc0/

/ 100

Health

do not use

risc0-zkos-v1compat has critical vulnerabilities — do not use

Update to >= 3.0.3 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
1 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

15/25

security

9/15

maturity

5/15

community

0/15

popularity_floor

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2025-61588	risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`	3.0.3

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/risc0-zkos-v1compat