mirage-crypto vulnerabilities

CVEs whose affected-version data names the mirage-crypto package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87732Medium· 6.2PoC

1w ago

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then…

▾ TwilightOCaml · mirage-cryptoEPSS 0.08%via NVD