Ed25519 identity public keys permit universal signature forgery
crates.io dcrypt-sign · Upgrade to 2.0.0 or later · >= 0.0.0-0, < 2.0.0 · GHSA-7j32-2mpw-c784
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–4 of 4 matching · newest first
crates.io dcrypt-sign · Upgrade to 2.0.0 or later · >= 0.0.0-0, < 2.0.0 · GHSA-7j32-2mpw-c784
crates.io dcrypt-api · Upgrade to 2.0.0 or later · >= 0.0.0-0, < 2.0.0 · GHSA-7hc7-h3f2-r4j6
crates.io dcrypt-algorithms · Upgrade to 2.0.0 or later · >= 0.0.0-0, < 2.0.0 · GHSA-h9f2-fgp8-vc4h
crates.io dcrypt-symmetric · Upgrade to 2.0.0 or later · >= 0.0.0-0, < 2.0.0 · GHSA-8cwp-4826-jg9f
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.