Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-50237
5.9
MEDIUMCVSS v3
Published
July 28, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key.
ed25519-dalek
Crates.ioFast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust.
Crates.ioFast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust.NVD