Junglewise Threat Intelligence

RUSTSEC-2026-0288 - cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Severity: low · CVSS 3.1 · Published 2026-08-16

Vendors: crates.io.

Executive brief

cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Affected products

  • crates.io cosmian_kyber

Related threats