Junglewise Threat Intelligence

RUSTSEC-2026-0290 - pqc_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Severity: low · CVSS 3.1 · Published 2026-08-16

Technologies: pqc_kyber (crates.io). Vendors: crates.io.

Executive brief

pqc_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Affected products

  • crates.io pqc_kyber

Related threats