Lucene search
+L

7 matches found

osv_rustsec
osv_rustsec
•added 2026/09/17 12:00 p.m.•17 views

RUSTSEC-2026-0289 pqc_kyber is unmaintained

The crate has had no releases since 0.7.1 2023-08-23, and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend Argyle-Software/kyber121, have gone unanswered. Recommended alternatives: - aws-lc-rs -...

5.8AI score
SaveExploits0References3
RustSec
RustSec
•added 2026/09/17 12:00 p.m.•18 views

pqc_kyber is unmaintained

The crate has had no releases since 0.7.1 2023-08-23, and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend Argyle-Software/kyber121, have gone unanswered. Recommended alternatives: - aws-lc-rs -...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-99691

The crate has had no releases since 0.7.1 2023-08-23, and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend Argyle-Software/kyber121, have gone unanswered. Recommended alternatives: - aws-lc-rs -...

5.8AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2022-0580

Malicious code in bioql PyPI...

9.8CVSS7.9AI score0.00831EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/06/17 12:19 a.m.•27 views

Miscomputed sha2 results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

2.2AI score
SaveExploits0References3Affected Software1
osv_rustsec
osv_rustsec
•added 2021/09/08 12:00 p.m.•41 views

RUSTSEC-2021-0100 Miscomputed results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

9.8CVSS9.4AI score0.00831EPSS
SaveExploits0References3
RustSec
RustSec
•added 2021/09/08 12:00 p.m.•29 views

Miscomputed results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

9.8CVSS2.2AI score0.00831EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder