crates.io/cosmian_kyber: high 7.4

cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: RUSTSEC-2026-0288
• https://crates.io/crates/cosmian_kyber
• https://rustsec.org/advisories/RUSTSEC-2026-0288.html
• https://github.com/Cosmian/kyber/pull/6

published 2026-08-16T12:00:00Z · modified 2026-09-18T09:15:05.126703653Z · JSON