crates.io/mykey: critical 9.1

Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

Action: Upgrade mykey to 2.0.0 or later.

cargo update -p mykey --precise 2.0.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2026-0335
• https://crates.io/crates/mykey
• https://rustsec.org/advisories/RUSTSEC-2026-0335.html
• https://github.com/waxspin/mykey/pull/25

published 2026-10-09T12:00:00Z · modified 2026-10-12T09:15:02.450106103Z · JSON