Skip to content
OpenAdvisories

Package · crates.io

rusty-paseto

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-j57r-4qw6-58r3

    rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency

    ## Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the `ed25519-dalek` crate, which is a dependency of the `rusty-paseto` crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of `ed25519-dalek` pr…

    rusty-paseto crates.io