crates.io/vodozemac CVE-2024-40640: low 2.9, EPSS 0.20%
Usage of non-constant time base64 decoder could lead to leakage of secret key material
Action: Upgrade vodozemac to 0.7.0 or later.
cargo update -p vodozemac --precise 0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: RUSTSEC-2024-0354
- nvd: CVE-2024-40640
- https://crates.io/crates/vodozemac
- https://rustsec.org/advisories/RUSTSEC-2024-0354.html
- https://github.com/matrix-org/vodozemac/commit/734b6c6948d4b2bdee3dd8b4efa591d93a61d272
CVE-2024-40640 · published · modified · JSON