Skip to content
OpenAdvisories

Package · crates.io

libcrux-kem

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    RUSTSEC-2026-0330

    Hybrid Encapsulation from Seed Panics on Short Seed

    For a hybrid KEM public key of type `PublicKey::WingKemDraft06` or `PublicKey::X25519MlKem768Draft06`, the `PublicKey::encapsulate_derand` function would panic in an indexing operation on a seed input of length shorter than 32 bytes. # Impact Applications enc…

    libcrux-kem crates.io
  • Unscored —
    RUSTSEC-2026-0331

    Panic on Decoding Short Hybrid Keys

    The deserialization functions `X25519MlKem768Draft00PrivateKey::decode` `X25519MlKem768Draft00PublicKey::decode` and `XWingKemDraft06PublicKey::decode` would panic during an indexing operation when provided an input slice that is shorter than the length of th…

    libcrux-kem crates.io