Rustcrypto - vulnerabilities (CVEs)
11 CVEs in 7 products, 0 in the last 30 days, newest from 2026-07-17.
Products
- Elliptic-curves - 3 CVEs
- Sm2 Elliptic Curve - 3 CVEs
- Aeads - 2 CVEs
- Cmov - 2 CVEs
- Rsa - 2 CVEs
- Signatures - 2 CVEs
- Utils - 2 CVEs
Newest CVEs of Rustcrypto
- CVE-2026-50185 - CVSS 3.3 (low), 2026-07-17: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches…
- CVE-2026-24850 - CVSS 5.3 (medium), 2026-01-28: The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and prior to version…
- CVE-2026-23519 - CVSS 9.8 (critical), 2026-01-15: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches…
- CVE-2026-22705 - CVSS 6.4 (medium), 2026-01-10: RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2,…
- CVE-2026-22699 - CVSS 7.5 (high), 2026-01-10: RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve…
- CVE-2026-22698 - CVSS 8.7 (high), 2026-01-10: RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve…
- CVE-2026-22700 - CVSS 7.5 (high), 2026-01-10: RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve…
- CVE-2026-21895 - CVSS 5.3 (medium), 2026-01-08: The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction…
- CVE-2025-27498 - CVSS 5.6 (medium), 2025-03-03: aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even…
- CVE-2023-49092 - CVSS 5.9 (medium), 2023-11-28: RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through…
- CVE-2023-42811 - CVSS 5.5 (medium), 2023-09-22: aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of…
