Skip to content
OpenAdvisories

Package · crates.io

sodiumoxide

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Unscored —
    RUSTSEC-2021-0137

    sodiumoxide is deprecated

    Alternatives may be found - not in any specific order: - [libsodium-sys-stable](https://crates.io/crates/libsodium-sys-stable) - [dryoc](https://crates.io/crates/dryoc) - [RustCrypto/nacl-compat](https://github.com/RustCrypto/nacl-compat) (`crypto_box`, `cryp…

    sodiumoxide crates.io
  • Critical 9.8
    CVE-2019-25002

    Incorrect Comparison in sodiumoxide

    An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.

    sodiumoxide crates.io
  • Medium 6.5
    CVE-2017-1000168

    scalarmult() vulnerable to degenerate public keys

    sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

    sodiumoxide crates.io