GHSA-xcc6-f2jq-43x6
BLAKE2b produces wrong tag when using `reset()` with a different-length key
GHSA-xcc6-f2jq-43x6 is a vulnerability with no CVSS score yet in orion, published October 30, 2026. No source lists public exploit code. Fixed in orion 0.17.16.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.17.16orion
Description
Summary
hazardous::mac::blake2b::Blake2b::reset() does not correctly reset the state when a key is supplied that has a different length than the one used upon initialization with hazardous::mac::blake2b::Blake2b::new(), because it errorneously uses a cached length.
Impact
Initialization hazardous::mac::blake2b::Blake2b with a key of some length N, followed by a reset with a key of length != N will produce an incorrect BLAKE2b tag, causing hazardous::mac::blake2b::Blake2b::verify() to fail. This means under honest protocol conditions, parties could experience failing tag verifications.
Resolution
Upgrade to v0.17.16 or v0.18.1.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
orioncrates.io | 0.0.0-0 up to 0.17.16, 0.18.0-0 up to 0.18.1 | 0.17.160.18.1 |
What each source reports
OSVRUSTSEC-2026-0428No score
BLAKE2b produces wrong tag when using `reset()` with a different-length key
Summary
hazardous::mac::blake2b::Blake2b::reset() does not correctly reset the state when a key is supplied that has a different length than the one used upon initialization with hazardous::mac::blake2b::Blake2b::new(), because it errorneously uses a cached length.
Impact
Initialization hazardous::mac::blake2b::Blake2b with a key of some length N, followed by a reset with a key of length != N will produce an incorrect BLAKE2b tag, causing hazardous::mac::blake2b::Blake2b::verify() to fail. This means under honest protocol conditions, parties could experience failing tag verifications.
Resolution
Upgrade to v0.17.16 or v0.18.1.
- Record
RUSTSEC-2026-0428- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.