mykey vulnerabilities
CVEs whose affected-version data names the mykey package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
RUSTSEC-2026-0336High· 7.5MIKEY message MAC is never verified on receive, so forged messages are accepted
MIKEY message MAC is never verified on receive, so forged messages are accepted
▾ Twilightmykey · mykeyvia OSV
RUSTSEC-2026-0335Critical· 9.1Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key
Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key
▾ Midnightmykey · mykeyvia OSV