Skip to content
OpenAdvisories

Package · crates.io

xxhash-rust

1 known vulnerabilities.

1 result · Feed

  • Low 2.3

    xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release

    I have a minimized safe Rust witness for xxhash-rust 0.8.15. Safe public route: xxhash_rust::xxh3::xxh3_64_with_secret(&[0x41], &[]) The caller-side harness contains no unsafe code. Under release execution, the internal minimum custom-secret length predicate …