{"action":"Upgrade libcrux-intrinsics to 0.0.4 or later.","affected":[{"fixed":"0.0.4","introduced":"0.0.3"}],"component":"libcrux-intrinsics","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.0.4"],"ghsa_id":"GHSA-2cgv-28vr-rv6j","id":"tcs_01M5KER4W1ASN74N6QGC2H0QJF","modified_at":"2026-02-22T23:20:55.220024Z","published_at":"2025-12-04T17:24:23Z","references":["https://osv.dev/vulnerability/GHSA-2cgv-28vr-rv6j","https://github.com/cryspen/libcrux/issues/1220","https://github.com/cryspen/libcrux/pull/1222","https://github.com/cryspen/libcrux/commit/8d10f45631afd1d93fabb2278dbb388a075b5608","https://github.com/cryspen/libcrux","https://rustsec.org/advisories/RUSTSEC-2025-0133.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2cgv-28vr-rv6j","url":"https://osv.dev/vulnerability/GHSA-2cgv-28vr-rv6j"}],"summary":"libcrux incorrectly calculates on aarch64"}