Security advisories

high2026-05-19

libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case

GHSA-fhvh-vw7h-9xf3

high2026-05-19

libcrux: Potential Panic on Overlong Ciphertext Buffer

GHSA-hc3c-63hc-2r9f

high2026-03-26

libcrux has an Incorrect Check of Signer Response Norm During Verification

GHSA-cp57-fq8g-qh6v

high2026-03-26

libcrux Panics During Standalone MAC Operations

GHSA-pv9v-5j35-xwcr

high2026-03-26

libcrux-sha3: Incorrect output from SHAKE squeeze functions

GHSA-q29p-9pfr-j652

high2026-03-26

libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure

GHSA-434v-x5qv-pmh6

high2026-03-26

libcrux: Panic in Signature Hint Decoding During Verification

GHSA-xrf2-5r3p-5wgj

low2026-02-12

Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`

GHSA-435g-fcv3-8j26

high2025-12-04

libcrux incorrectly calculates on aarch64

GHSA-2cgv-28vr-rv6j