PkgSeer

Vulnerabilities

Last updated 45 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
ml-dsa Timing side-channel in ML-DSA decomposition Medium Risk 6.4 10 months ago 2 hours ago
libcrux-ml-dsa libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case High Risk 8.0 4 months ago 4 months ago
libcrux-ml-dsa Signature Verification on AVX2 Platforms Mishandles Edge Case Unknown 5 months ago 4 months ago
libcrux-ml-dsa AVX2 Implementation Did Not Fully Reduce Intermediate Values Unknown 5 months ago 5 months ago
ml-dsa RustCrypto: Signatures has timing side-channel in ML-DSA decomposition Medium Risk 6.4 9 months ago 5 months ago
libcrux-ml-dsa libcrux has an Incorrect Check of Signer Response Norm During Verification High Risk 8.0 6 months ago 6 months ago
libcrux-ml-dsa libcrux: Panic in Signature Hint Decoding During Verification High Risk 8.0 6 months ago 6 months ago
libcrux-ml-dsa Panic in Signature Hint Decoding During Verification Unknown 7 months ago 6 months ago
libcrux-ml-dsa Incorrect Check of Signer Response Norm During Verification Unknown 7 months ago 6 months ago
libcrux-ml-dsa libcrux incorrectly calculates on aarch64 High Risk 8.0 10 months ago 7 months ago
ml-dsa ml-dsa's UseHint function has off by two error when r0 equals zero Medium Risk 6.0 8 months ago 8 months ago
ml-dsa ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices Medium Risk 5.3 8 months ago 8 months ago
Data courtesy of OSV.dev
Page 1