crates.io/ascon_aead CVE-2025-27498: medium 5.7, EPSS 0.13%
AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure
Action: Upgrade ascon_aead to 0.4.3 or later.
cargo update -p ascon_aead --precise 0.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.3 | - |
Fixed versions
| 0.4.3 |
Sources
- osv: GHSA-r38m-44fw-h886
- nvd: CVE-2025-27498
- https://github.com/RustCrypto/AEADs/security/advisories/GHSA-r38m-44fw-h886
- https://github.com/RustCrypto/AEADs/commit/d1d749ba57e38e65b0e037cd744d0b17f7254037
- https://github.com/RustCrypto/AEADs
CVE-2025-27498 · published · modified · JSON