Description
`cosmian_kyber` is a fork of `Argyle-Software/kyber` that has seen no maintainer
activity. It inherits the fork parent's broken AVX2 constant-time code, and the
open fix pull request (Cosmian/kyber#6) has gone unanswered.
Recommended alternatives:
- [aws-lc-rs](https://crates.io/crates/aws-lc-rs)
- [graviola](https://crates.io/crates/graviola)
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | cosmian_kyber | >= 0.0.0-0 | — | RUSTSEC-2026-0287 |