RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2026-0161

pqcrypto-mlkem is unmaintained: upstream PQClean project being archived

Reported
Issued
Package
pqcrypto-mlkem (crates.io)
Type
INFO Unmaintained
References
Patched
no patched versions

Description

This crate provides Rust bindings to ML-KEM (FIPS 203) via C implementations from PQClean. The PQClean project is being archived in or after July 2026 (see PQClean/PQClean#604), after which no further security patches or bug fixes will be applied to the upstream implementations.

As a result, this crate will no longer receive updates. Users should migrate to the ml-kem crate, which provides a pure-Rust implementation of ML-KEM (FIPS 203).

Advisory available under CC0-1.0 license.