{"action":"Upgrade ml-dsa to 0.1.0-rc.5 or later.","affected":[{"fixed":"0.1.0-rc.5","introduced":"0"}],"component":"ml-dsa","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.1.0-rc.5"],"ghsa_id":"GHSA-h37v-hp6w-2pp8","id":"tcs_01M5KF08272F57HX0ZD2WH5FZJ","modified_at":"2026-02-03T17:53:20.898470Z","published_at":"2026-02-02T20:33:08Z","references":["https://osv.dev/vulnerability/GHSA-h37v-hp6w-2pp8","https://github.com/RustCrypto/signatures/security/advisories/GHSA-h37v-hp6w-2pp8","https://github.com/RustCrypto/signatures/commit/10f4ff04cb43ef2b789ee06e885f11cd054b1335","https://github.com/RustCrypto/signatures"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-h37v-hp6w-2pp8","url":"https://osv.dev/vulnerability/GHSA-h37v-hp6w-2pp8"}],"summary":"ml-dsa's UseHint function has off by two error when r0 equals zero"}