orion vulnerabilities (crates.io)

3 vulnerabilities.

• orion crates.io BLAKE2b produces wrong tag when using `reset()` with a different-length key GHSA-xcc6-f2jq-43x6 Fix available No scoreOctober 30, 2026
• orion crates.io LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time GHSA-r7wm-4vf2-h44w Fix available No scoreOctober 30, 2026
• orion crates.io Flaw in streaming state in orion CVE-2018-20999 Fix available 7.5 HighDecember 20, 2018