Vulnerability GHSA-gffv-5hr2-f9gj
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
5 years ago
August 25, 2021 at 08:43 PM UTC
Flaw in streaming state in orion
0.1.0 - 0.11.1
0.1.0 - 0.11.1
Summary
Flaw in streaming state in orion
Details
Affected versions of this crate did not properly reset a streaming state. Resetting a streaming state, without finalising it first, creates incorrect results. The flaw was corrected by not first checking if the state had already been reset, when calling reset().
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
17 hours ago
LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time
0.1.0 - 0.17.15 and 0.18.0-rc.1 - 0.18.0 RUSTSEC-2026-0426
0.1.0 - 0.17.15 and 0.18.0-rc.1 - 0.18.0 RUSTSEC-2026-0426
Unknown
17 hours ago
BLAKE2b produces wrong tag when using `reset()` with a different-length key
0.1.0 - 0.17.15 and 0.18.0-rc.1 - 0.18.0 RUSTSEC-2026-0428
0.1.0 - 0.17.15 and 0.18.0-rc.1 - 0.18.0 RUSTSEC-2026-0428
High Risk
7 years ago
Flaw in streaming state reset() functions can create incorrect results.
0.1.0 - 0.11.1 RUSTSEC-2018-0012
0.1.0 - 0.11.1 RUSTSEC-2018-0012
Impacted packages
Timeline
Published
5 years ago
August 25, 2021 at 08:43 PM UTC
Fixed (0.11.2)
7 years ago
December 22, 2018 at 09:19 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:00 AM UTC