mykey vulnerabilities (crates.io)

2 vulnerabilities.

• mykey crates.io MIKEY message MAC is never verified on receive, so forged messages are accepted GHSA-xq78-wvcv-hqvj Fix available 7.5 HighOctober 9, 2026
• mykey crates.io Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key GHSA-fwjg-cm92-j3hj Fix available 9.1 CriticalOctober 9, 2026