{"action":"Upgrade hpke-rs to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"hpke-rs","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-g433-pq76-6cmf","id":"tcs_01M5KEXRGB8S03RDW16ACNN2HP","modified_at":"2026-03-25T21:48:54.711298Z","published_at":"2026-02-13T20:05:10Z","references":["https://osv.dev/vulnerability/GHSA-g433-pq76-6cmf","https://github.com/cryspen/hpke-rs/security/advisories/GHSA-g433-pq76-6cmf","https://github.com/cryspen/hpke-rs/pull/123","https://github.com/cryspen/hpke-rs/pull/124","https://github.com/cryspen/hpke-rs/pull/127","https://github.com/cryspen/hpke-rs/pull/128","https://github.com/cryspen/hpke-rs/commit/1c247b5c9aeca602ad2971c9bd49817fe2c308e6","https://github.com/cryspen/hpke-rs/commit/25248bd624cc0325c98a05c169a0c9aa0aced632","https://github.com/cryspen/hpke-rs/commit/3a8254938f43bdc4e0c9c4f987f8071f19779066","https://github.com/cryspen/hpke-rs/commit/b54c8bb83906331bdf4f606cafa30cd7fd20b531","https://github.com/cryspen/hpke-rs","https://rustsec.org/advisories/RUSTSEC-2026-0070.html","https://rustsec.org/advisories/RUSTSEC-2026-0072.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g433-pq76-6cmf","url":"https://osv.dev/vulnerability/GHSA-g433-pq76-6cmf"}],"summary":"Bug fixes in hpke-rs, hpke-rs-rust-crypto"}