https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 13:33:47 +0000 https://cve.radiocsirt.org/vuln/rustsec-2026-0069 <p><strong>Affected:</strong> crates.io: hpke-rs</p> <p>Passing values `length &gt; 65535` to `Context::export` produces output that disagrees with the RFC 9180 label encoding. In particular the length value is cast to `u16` truncating any value exceeding 65535.</p> <p>## Impact Applications that use hpke-rs to export very large secrets would experience interoperability issues with other applications that use a correct implementation to export very large secrets.</p> <p>## Mitigation Starting with version `0.6.0`, an error will be returned when attempting to call `Context::export` with an output length &gt; 65535.</p> <p><strong>Affected:</strong> crates.io: hpke-rs</p> <p>Passing values `length &gt; 65535` to `Context::export` produces output that disagrees with the RFC 9180 label encoding. In particular the length value is cast to `u16` truncating any value exceeding 65535.</p> <p>## Impact Applications that use hpke-rs to export very large secrets would experience interoperability issues with other applications that use a correct implementation to export very large secrets.</p> <p>## Mitigation Starting with version `0.6.0`, an error will be returned when attempting to call `Context::export` with an output length &gt; 65535.</p> https://cve.radiocsirt.org/vuln/rustsec-2026-0069