critical9.8
CVE-2019-25002
An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust.
Impact
An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sodiumoxide Project | Sodiumoxide | before 0.2.5 |