Skip to content
OpenAdvisories

Package · crates.io

mykey

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-xq78-wvcv-hqvj

    MIKEY message MAC is never verified on receive, so forged messages are accepted

    `mykey` implements MIKEY (RFC 3830) for SRTP key exchange. No receive path verified the MIKEY message authentication code. `crypto::verify_mac` existed and was correct, but it was called only from unit tests — neither `MikeyMessage::from_bytes` nor `MikeyMess…

    mykey crates.io