RustCrypto vulnerabilities
We track 4 vulnerabilities in RustCrypto products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 15, 2026.
Latest RustCrypto vulnerabilities
- 9.8 Critical severity
utils: Observable Discrepancy
RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. Prior to 0.4.4, the thumbv6m-none-eabi (Cortex M0, M0+ and M1) compiler emits non-con
- 7.5 High severity
RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support…
RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc
- 7.5 High severity
RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support…
RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc
- 7.5 High severity
elliptic-curves: Insufficient Entropy
RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc