CVE-2019-25002

An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties...

b2b (0.1.0), box_stream (>=0.1.0, <=0.2.1) +57 more potentially affected by CVE-2019-25002 via sodiumoxide (>=0.0.4, <=0.1.0)

sodiumoxide CARGO version =0.0.4, =0.1.0, =0.0.7, =0.1.0, =0.5.0, =0.0.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.9, =0.2.5 and more Source cves: CVE-2019-25002 Source advisory: OSV:RUSTSEC-2019-0026...