{"action":"Upgrade keccak to 0.1.6 or later.","affected":[{"fixed":"0.1.6","introduced":"0.0.0-0"}],"component":"keccak","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.1.6"],"ghsa_id":"GHSA-3288-p39f-rqpv","id":"tcs_01M5KFAR9J0JTVAA6P9PEBK0RP","modified_at":"2026-02-20T04:00:15Z","published_at":"2026-02-12T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0012","https://crates.io/crates/keccak","https://rustsec.org/advisories/RUSTSEC-2026-0012.html","https://github.com/RustCrypto/sponges/pull/101"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0012","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0012"}],"summary":"Unsoundness in opt-in ARMv8 assembly backend for `keccak`"}