- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 2 high
Advisories 2
- CVE-2026-12852High 8.7
MLS wire decoder allocates attacker-declared opaque length before bounds check
Affected: from 1.73, fixed in 1.85.
- CVE-2026-59644High 8.7
MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
Affected: from 1.73, fixed in 1.85.