Skip to content
Rustcrypto vulnerabilities
Newest
-
rustcrypto cmov, utils +1 more
RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set
CVE-2026-50185
Fix available
2.0 Low
-
rustcrypto signatures
ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices
CVE-2026-24850
Fix available
5.3 Medium
-
rustcrypto cmov, utils +1 more
RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz
CVE-2026-23519
Fix available
8.9 High
-
rustcrypto elliptic-curves, sm2 elliptic curve +1 more
RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE
CVE-2026-22700
7.5 High
-
rustcrypto elliptic-curves, sm2 elliptic curve +1 more
RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()
CVE-2026-22699
7.5 High
-
rustcrypto elliptic-curves, sm2 elliptic curve +1 more
RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability
CVE-2026-22698
8.7 High
-
rustcrypto rsa
rsa crate has potential panic on a prime being equal to 1
CVE-2026-21895
Fix available
2.7 Low
-
rustcrypto signatures
RustCrypto: Signatures has timing side-channel in ML-DSA decomposition
CVE-2026-22705
Fix available
6.4 Medium
-
gofiber utils
Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values
CVE-2025-66565
Fix available
9.3 Critical
-
rustcrypto aeads
AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure
CVE-2025-27498
Fix available
5.6 Medium
-
rustcrypto rsa
RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels
CVE-2023-49092
Fix available
5.9 Medium
-
aes-gcm project aes-gcm, rustcrypto aeads, fedoraproject fedora +2 more
AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure
CVE-2023-42811
Fix available
4.7 Medium
-
fredsmith utils
fredsmith utils Filename screenshot_sync predictable state
CVE-2021-4277
2.6 Low