{"action":"Upgrade pqcrypto-hqc to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"}],"component":"pqcrypto-hqc","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-753p-wrj5-g8fj","id":"tcs_01M5KETZJ1QZPGE93B56R4FAQE","modified_at":"2024-12-11T21:48:32Z","published_at":"2024-12-11T21:47:37Z","references":["https://osv.dev/vulnerability/GHSA-753p-wrj5-g8fj","https://github.com/PQClean/PQClean/security/advisories/GHSA-753p-wrj5-g8fj","https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-gpf4-vrrw-r8v7","https://github.com/PQClean/PQClean/pull/578","https://github.com/rustpq/pqcrypto/commit/0c07fa8badbf44f67d3ff1571df31ca54e5228c0","https://github.com/PQClean/PQClean"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-753p-wrj5-g8fj","url":"https://osv.dev/vulnerability/GHSA-753p-wrj5-g8fj"}],"summary":"PQClean has a correctness error in HQC decapsulation"}