RUSTSEC-2026-0207

See a problem?
Please try reporting it to the source first.
Source
https://rustsec.org/advisories/RUSTSEC-2026-0207
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0207.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2026-0207
Published
2026-04-22T12:00:00Z
Modified
2026-07-17T11:45:03.729477177Z
Severity
  • 8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls
Details

The incremental squeeze functions in the portable SHAKE XOF API, when attempting to squeeze an output using multiple calls to squeeze, rather than squeezing the full output at once, could output incorrect values. Internally, output blocks that were not completely squeezed were not buffered for the next call to squeeze, which would consequently drop bytes of the correct squeeze output if the preceding call requested an output of length in bytes not cleanly divisible by RATE (168 for SHAKE128, 136 for SHAKE256).

Impact

This bug impacts users that rely on this XOF API to squeeze output in multiple calls where any of the calls request an output length that is not divisible by RATE. It does not impact the use of libcrux-sha3 in libcrux-ml-kem or libcrux-ml-dsa.

Mitigation

Starting from version 0.0.10 the squeeze functions correctly output all squeezed bytes independent of the number of squeeze calls and the output lengths requested in each call.

Database specific 
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / libcrux-sha3

Package

Name
libcrux-sha3
View open source insights on deps.dev
Purl
pkg:cargo/libcrux-sha3

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-0
Fixed
0.0.10

Ecosystem specific 

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "os": [],
        "functions": [
            "libcrux_sha3::portable::incremental::Shake128Xof::squeeze",
            "libcrux_sha3::portable::incremental::Shake256Xof::squeeze"
        ]
    }
}

Database specific

cvss 
"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
source 
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0207.json"
categories 
[]
informational 
null