RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2026-0289

pqc_kyber is unmaintained

Reported
Issued
Package
pqc_kyber (crates.io)
Type
INFO Unmaintained
Keywords
#kyber #ml-kem #post-quantum
References
Patched
no patched versions

Description

The crate has had no releases since 0.7.1 (2023-08-23), and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend (Argyle-Software/kyber#121), have gone unanswered.

Recommended alternatives:

Advisory available under CC0-1.0 license.