crates.io/ic-cipher: high 7.5
Poly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or more
Action: Upgrade ic-cipher to 0.2.20 or later.
cargo update -p ic-cipher --precise 0.2.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.5 | 0.2.20 | - |
Fixed versions
| 0.2.20 |
Sources
- osv: RUSTSEC-2026-0337
- https://crates.io/crates/ic-cipher
- https://rustsec.org/advisories/RUSTSEC-2026-0337.html
- https://github.com/nervosys/IronCrypto/commit/a8160a18b5c66288f05dc62f5ea2159c687b9416
published · modified · JSON