Skip to content
OpenAdvisories

Package · crates.io

vodozemac

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.9
    CVE-2024-40640

    Usage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemac

    vodozemac is an open source implementation of Olm and Megolm in pure Rust. Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and `PkDecryption` Ed25519 secret keys. This flaw …

    Matrix vodozemac vodozemac crates.io
  • Low 2.5
    CVE-2024-34063

    Degraded secret zeroization capabilities in vodozemac

    vodozemac is an implementation of Olm and Megolm in pure Rust. Versions 0.5.0 and 0.5.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies (the Dalek crates), which moved secret zeroization cap…

    Matrix vodozemac vodozemac crates.io