ml-dsa vulnerabilities (crates.io)

3 vulnerabilities.

• ml-dsa crates.io ml-dsa's UseHint function has off by two error when r0 equals zero GHSA-h37v-hp6w-2pp8 Fix available 5.5 MediumFebruary 2, 2026
• ml-dsa crates.io ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices CVE-2026-24850 Fix available 5.3 MediumJanuary 28, 2026
• ml-dsa crates.io RustCrypto: Signatures has timing side-channel in ML-DSA decomposition CVE-2026-22705 Fix available 6.4 MediumDecember 12, 2025