crates.io/libcrux-ed25519 CVE-2026-76234: high 7.5, EPSS 0.31%

Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`

Action: Upgrade libcrux-ed25519 to 0.0.6 or later.

cargo update -p libcrux-ed25519 --precise 0.0.6

Affected

Fixed versions

Sources

• osv: GHSA-435g-fcv3-8j26#crates.io/libcrux-ed25519
• nvd: CVE-2026-76234
• https://github.com/cryspen/libcrux/security/advisories/GHSA-435g-fcv3-8j26
• https://github.com/cryspen/libcrux/pull/1301
• https://github.com/cryspen/libcrux/pull/1319
• https://github.com/cryspen/libcrux/pull/1320
• https://github.com/cryspen/libcrux/commit/4d6f5d3c2542b6179a6474dec8cfb8b8ddf31a84
• https://github.com/cryspen/libcrux/commit/a09022c5811ca7fd1c6d9a239ff294d64ee86734
• https://github.com/cryspen/libcrux/commit/f303b6446c19fe9a7c993f61e426023609cd5fac
• https://github.com/cryspen/libcrux
• https://rustsec.org/advisories/RUSTSEC-2026-0023.html
• https://rustsec.org/advisories/RUSTSEC-2026-0024.html
• https://rustsec.org/advisories/RUSTSEC-2026-0025.html
• https://rustsec.org/advisories/RUSTSEC-2026-0026.html

CVE-2026-76234 · published 2026-02-12T22:12:14Z · modified 2026-08-20T04:03:48.330165805Z · JSON