Executive brief
Plonky3: The sponge construction used to get a hash function from a cryptographic permutation is not collision resistant for inputs of different lengths
Affected products
- crates.io p3-symmetric
Junglewise Threat Intelligence
Severity: medium · CVSS 4 · Published 2026-04-16
Vendors: crates.io.
Plonky3: The sponge construction used to get a hash function from a cryptographic permutation is not collision resistant for inputs of different lengths