RUSTSEC-2026-0024

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2026-0024

Import Source

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2026-0024

Aliases

Published

2026-01-26T12:00:00Z

Modified

2026-02-25T17:41:19.037419Z

Severity

0.0 (None) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Incorrect X25519 clamping check rejects all secrets on import

Details

The latest releases of the libcrux-psq crate contains the following bug-fix:

#1301: Fix broken clamping check for imported X25519 secret keys

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}