crates.io/cocoon CVE-2024-21530: medium 4.5, EPSS 0.14%

Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse

Action: Upgrade cocoon to 0.4.0 or later.

cargo update -p cocoon --precise 0.4.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2023-0068
• https://crates.io/crates/cocoon
• https://rustsec.org/advisories/RUSTSEC-2023-0068.html
• https://github.com/fadeevab/cocoon/issues/22

CVE-2024-21530 · published 2023-10-15T12:00:00Z · modified 2025-10-28T06:02:18Z · JSON