b4ae (>=2.1.1 <=2.1.3), env_encryption_tool (=0.9.17) +8 more potentially affected by unknown CVE via pqcrypto-mldsa (=0.1.2)

pqcrypto-mldsa CARGO version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pqcrypto-mldsa and may be impacted: - b4ae =2.1.1, =0.0.3, =0.18.0, =0.1.0, =1.0.0-alpha.5, =1.0.0-alpha.7 - uvb-crypto-pqc =0.2.1 - uvb-mrvb =0.2.1 - zipher =0.1.8...

Replaced by `pqcrypto-mldsa`

This crate has been replaced by pqcrypto-mldsa, which provides a FIPS204-compatible implementation of ML-DSA...

RUSTSEC-2024-0380 Replaced by `pqcrypto-mldsa`

This crate has been replaced by pqcrypto-mldsa, which provides a FIPS204-compatible implementation of ML-DSA...

PT-2024-40926 · Pqcrypto · Pqcrypto

Name of the Vulnerable Software and Affected Versions: pqcrypto crate affected versions not specified Description: The pqcrypto crate has been replaced by pqcrypto-mldsa, which provides a FIPS204-compatible implementation of ML-DSA. Recommendations: At the moment, there is no information about a...