Skip to content
OpenAdvisories

Package · crates.io

dcrypt-symmetric

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GHSA-8cwp-4826-jg9f

    Streaming AEAD does not authenticate stream structure

    In all published versions of `dcrypt-symmetric` before 2.0.0, version-1 GCM and ChaCha20-Poly1305 streams used unauthenticated terminator, counter, and length fields. Decryptors trusted transmitted counters, allocated from unbounded lengths, and discarded pla…

    dcrypt-symmetric crates.io