crates.io/mykey: high 7.5

MIKEY message MAC is never verified on receive, so forged messages are accepted

Action: Upgrade mykey to 2.0.0 or later.

cargo update -p mykey --precise 2.0.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2026-0336
• https://crates.io/crates/mykey
• https://rustsec.org/advisories/RUSTSEC-2026-0336.html
• https://github.com/waxspin/mykey/pull/25

published 2026-10-09T12:00:00Z · modified 2026-10-12T09:15:02.459440491Z · JSON