GHSA-g433-pq76-6cmf Bug fixes in hpke-rs, hpke-rs-rust-crypto
Fixes integer overflow in context counters and incorrect algorithm mapping in hpke-rs, potentially leading to cryptographic bypasses or errors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-g433-pq76-6cmf?
GHSA-g433-pq76-6cmf is a vulnerability in hpke-rs, published on 4 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
We publish a GitHub security advisory for any releases whose CHANGELOG includes bug-fixes, and encourage our users to upgrade. The latest releases of the hpke-rs and hpke-rs-rust-crypto crates contain the following bug-fixes:
hpke-rs
- #127: Fix
KemAlgorithm::TryFrom<u16>mapping where0x004Dincorrectly resolved toXWingDraft06instead ofXWingDraft06Obsolete. - #123: Fix potential overflow in context counter and switch to use u64.
- #128: Return errors when trying to use open/seal with export only ciphersuite and when using kdf export with an output that's too long (instead of truncating it)
The issue fixed in #123 was first reported by Nadim Kobeissi. The issues fixed in #127 and #128 were first reported by Scott Arciszewski.
hpke-rs-rust-crypto
- #124: Error out on x25519 0 keys
The issue fixed in #124 was first reported by Nadim Kobeissi.
Which versions are affected by GHSA-g433-pq76-6cmf?
8 open source packages ship an affected version, including hpke-rs and hpke-rs-rust-crypto.
| Package | Affected | Fixed in |
|---|---|---|
hpke-rs crates.io | All versions | 0.6.0 |
hpke-rs crates.io | All versions | 0.6.0 |
hpke-rs crates.io | From 0.0.0-0 | 0.6.0 |
hpke-rs crates.io | From 0.0.0-0 | 0.6.0 |
hpke-rs crates.io | From 0.0.0-0 | 0.6.0 |
hpke-rs-rust-crypto crates.io | All versions | 0.6.0 |
2 more packages
hpke-rs-rust-crypto crates.io | All versions | 0.6.0 |
hpke-rs-rust-crypto crates.io | From 0.0.0-0 | 0.6.0 |
How do I fix GHSA-g433-pq76-6cmf?
Upgrade hpke-rs to 0.6.0 or later.
Is GHSA-g433-pq76-6cmf being exploited?
There is no known exploitation of GHSA-g433-pq76-6cmf in the wild and no public exploit code.
Sources
Also known as RUSTSEC-2026-0069, RUSTSEC-2026-0070, RUSTSEC-2026-0071, RUSTSEC-2026-0072.