Skip to content
OpenAdvisories

Package · crates.io

cocoon

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.5
    CVE-2024-21530

    Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse

    Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequentially called. An attacker can generate the same ciphertext by creating a new encrypted message with the…

    cocoon crates.io