{"items":[{"id":"CVE-2026-50185","published":"2026-07-17T18:35:02.078Z","updated":"2026-07-20T19:24:54.587Z","title":"RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set","severity":"LOW","score":2,"vendor":"RustCrypto","product":"utils","kev":false,"epss":0.00157,"kevAdded":null,"exploit":true},{"id":"CVE-2026-24850","published":"2026-01-28T00:24:53.146Z","updated":"2026-01-28T14:54:22.827Z","title":"ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices","severity":"MEDIUM","score":5.3,"vendor":"RustCrypto","product":"signatures","kev":false,"epss":0.00335,"kevAdded":null,"exploit":true},{"id":"CVE-2026-23519","published":"2026-01-15T19:13:54.440Z","updated":"2026-01-15T19:57:48.741Z","title":"RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz","severity":"HIGH","score":8.9,"vendor":"RustCrypto","product":"utils","kev":false,"epss":0.00558,"kevAdded":null,"exploit":true},{"id":"CVE-2026-22705","published":"2026-01-10T06:14:20.292Z","updated":"2026-01-12T16:43:06.463Z","title":"RustCrypto: Signatures has timing side-channel in ML-DSA decomposition","severity":"MEDIUM","score":6.4,"vendor":"RustCrypto","product":"signatures","kev":false,"epss":0.00163,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22700","published":"2026-01-10T05:17:25.583Z","updated":"2026-01-12T14:46:46.227Z","title":"RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE","severity":"HIGH","score":7.5,"vendor":"RustCrypto","product":"elliptic-curves","kev":false,"epss":0.00312,"kevAdded":null,"exploit":true},{"id":"CVE-2026-22699","published":"2026-01-10T05:17:22.818Z","updated":"2026-01-12T14:59:18.634Z","title":"RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()","severity":"HIGH","score":7.5,"vendor":"RustCrypto","product":"elliptic-curves","kev":false,"epss":0.00436,"kevAdded":null,"exploit":true},{"id":"CVE-2026-22698","published":"2026-01-10T05:17:19.993Z","updated":"2026-01-12T16:48:30.706Z","title":"RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability","severity":"HIGH","score":8.7,"vendor":"RustCrypto","product":"elliptic-curves","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2026-21895","published":"2026-01-08T14:06:29.288Z","updated":"2026-01-08T15:55:13.043Z","title":"rsa crate has potential panic on a prime being equal to 1","severity":"LOW","score":2.7,"vendor":"RustCrypto","product":"RSA","kev":false,"epss":0.00444,"kevAdded":null,"exploit":false},{"id":"CVE-2025-27498","published":"2025-03-03T16:52:02.750Z","updated":"2025-03-03T17:32:24.640Z","title":"AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure","severity":"MEDIUM","score":5.6,"vendor":"RustCrypto","product":"AEADs","kev":false,"epss":0.00125,"kevAdded":null,"exploit":true},{"id":"CVE-2023-49092","published":"2023-11-28T20:57:06.739Z","updated":"2024-11-27T16:03:51.520Z","title":"RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels","severity":"MEDIUM","score":5.9,"vendor":"RustCrypto","product":"RSA","kev":false,"epss":0.0061,"kevAdded":null,"exploit":false},{"id":"CVE-2023-42811","published":"2023-09-22T15:19:15.445Z","updated":"2025-06-18T14:22:56.534Z","title":"AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure","severity":"MEDIUM","score":4.7,"vendor":"RustCrypto","product":"AEADs","kev":false,"epss":0.0023,"kevAdded":null,"exploit":true}]}