Description
The crate has had no releases since 0.7.1 (2023-08-23), and the upstream
repository shows no maintainer activity. Open pull requests, including a fix for
a chosen-ciphertext key-recovery flaw in the AVX2 backend
(Argyle-Software/kyber#121), have gone unanswered.
Recommended alternatives:
- [aws-lc-rs](https://crates.io/crates/aws-lc-rs)
- [graviola](https://crates.io/crates/graviola)
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | pqc_kyber | >= 0.0.0-0 | — | RUSTSEC-2026-0289 |