{"action":"Upgrade ascon_aead to 0.4.3 or later.","affected":[{"fixed":"0.4.3","introduced":"0"}],"component":"ascon_aead","cve_ids":["CVE-2025-27498"],"ecosystem":"crates.io","epss":0.00125,"exploited":false,"fixed_versions":["0.4.3"],"ghsa_id":"GHSA-r38m-44fw-h886","id":"tcs_01M5KF2VRT1W6R8R88YK2ANZ5J","modified_at":"2025-03-03T20:42:06.139683Z","published_at":"2025-03-03T20:22:19Z","references":["https://osv.dev/vulnerability/GHSA-r38m-44fw-h886","https://github.com/RustCrypto/AEADs/security/advisories/GHSA-r38m-44fw-h886","https://nvd.nist.gov/vuln/detail/CVE-2025-27498","https://github.com/RustCrypto/AEADs/commit/d1d749ba57e38e65b0e037cd744d0b17f7254037","https://github.com/RustCrypto/AEADs"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-r38m-44fw-h886","url":"https://osv.dev/vulnerability/GHSA-r38m-44fw-h886"},{"source":"nvd","source_id":"CVE-2025-27498","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27498"}],"summary":"AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure"}