libcrux-ecdh vulnerabilities

CVEs whose affected-version data names the libcrux-ecdh package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-76234High· 7.5

1mo ago

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping ch…

▾ Twilightlibcrux-ecdh · libcrux-ecdhEPSS 0.31%via NVD