Executive brief
RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE
Affected products
- crates.io sm2
Junglewise Threat Intelligence
CVE-2026-22700: RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE
CVE-2026-22700 · Severity: low · CVSS 3.1 · Published 2026-01-13
Technologies: sm2 (crates.io). Vendors: crates.io.