RUSTSEC-2026-0287
cosmian_kyber is unmaintained
cosmian_kyber is a fork of Argyle-Software/kyber that has seen no maintainer
activity. It inherits the fork parent's broken AVX2 constant-time code, and the
open fix pull request (Cosmian/kyber#6) has gone unanswered.
Recommended alternatives:
What each source reports
OSVNo score
cosmian_kyber is unmaintained
cosmian_kyber is a fork of Argyle-Software/kyber that has seen no maintainer
activity. It inherits the fork parent's broken AVX2 constant-time code, and the
open fix pull request (Cosmian/kyber#6) has gone unanswered.
Recommended alternatives:
- Record
RUSTSEC-2026-0287- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cosmian_kybercrates.io | 0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0287 is a vulnerability with no CVSS score yet in cosmian_kyber, published September 17, 2026. No source lists public exploit code. No source names a fixed version.