Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

orion

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
crates.io

Advisories 3

  • BLAKE2b produces wrong tag when using `reset()` with a different-length key

    Affected: fixed in 0.17.16; from 0.18.0-0, fixed in 0.18.1.

  • LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time

    Affected: fixed in 0.17.16; from 0.18.0-0, fixed in 0.18.1.

  • An issue was discovered in the orion crate before 0.11.2 for Rust.

    Affected: fixed in 0.11.2; fixed in 0.11.2.