crates.io/xxhash-rust: low 2.3

xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release

Action: Upgrade xxhash-rust to 0.8.16 or later.

cargo update -p xxhash-rust --precise 0.8.16

Affected

Fixed versions

Sources

• osv: GHSA-6g2r-675j-hx59
• https://github.com/DoumanAsh/xxhash-rust/security/advisories/GHSA-6g2r-675j-hx59
• https://github.com/DoumanAsh/xxhash-rust/commit/200cadb1a442c7f6cd9747e7d4297379b6b74200
• https://github.com/DoumanAsh/xxhash-rust

published 2026-10-02T18:29:13Z · modified 2026-10-02T18:45:04.881140605Z · JSON