Sodiumoxide
cargo: sodiumoxide
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-25002 | Cri | 0.57 | 9.8 | 0.01 | Dec 31, 2020 | An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties. | ||
| CVE-2017-1000168 | Med | 0.35 | 6.5 | 0.01 | Nov 17, 2017 | sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys |
- risk 0.57cvss 9.8epss 0.01
An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.
- risk 0.35cvss 6.5epss 0.01
sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys