RUSTSEC-2026-0077
NoneCVSS
—
EPSS
—
Published
Mar 4, 2026
CISA due date
—
The record
Incorrect Check of Signer Response Norm During Verification
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | libcrux-ml-dsa | 0 | 0.0.8 |
| crates.io | libcrux-ml-dsa | 0.0.0-0 | 0.0.8 |
Related vulnerabilities
- RUSTSEC-2026-0125 Signature Verification on AVX2 Platforms Mishandles Edge Case Also affects libcrux-ml-dsa
- RUSTSEC-2026-0126 AVX2 Implementation Did Not Fully Reduce Intermediate Values Also affects libcrux-ml-dsa
- RUSTSEC-2026-0076 Panic in Signature Hint Decoding During Verification Also affects libcrux-ml-dsa
- RUSTSEC-2025-0133 Incorrect calculation on aarch64 Also affects libcrux-ml-dsa