GHSA-p4v8-jgcv-9g75
safe_pqc_kyber leaks parts of secret keys
Impact
On some platforms, when an attacker can time decapsulation, and in particular when the attacker can forge cipher texts, they can learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 0.6.2.
References
What each source reports
GitHub AdvisoriesNo score
safe_pqc_kyber leaks parts of secret keys
Impact
On some platforms, when an attacker can time decapsulation, and in particular when the attacker can forge cipher texts, they can learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 0.6.2.
References
- Record
GHSA-p4v8-jgcv-9g75- Updated
- 2026-11-02
OSVNo score
safe_pqc_kyber leaks parts of secret keys
Impact
On some platforms, when an attacker can time decapsulation, and in particular when the attacker can forge cipher texts, they can learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 0.6.2.
References
- Record
GHSA-p4v8-jgcv-9g75- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
safe_pqc_kybercrates.io | before 0.6.2 | 0.6.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-p4v8-jgcv-9g75 is a vulnerability with no CVSS score yet in safe_pqc_kyber, published January 3, 2024. No source lists public exploit code. Fixed in safe_pqc_kyber 0.6.2.