Rust advisories / crate
Security history · ml-dsa · data from Oct 24, 2026
Is ml-dsa safe to use? Its security history
VerdictNo open advisories. 3 past vulnerabilities were fixed; use 0.1.0-rc.3 or newer to be clear of all of them.
3advisories on record
3vulnerabilities
0unmaintained notices
0.1.0-rc.3newest fixed version
Every advisory, newest first
- VulnerabilityGHSA-h37v-hp6w-2pp8 · 2026-02-02ml-dsa's UseHint function has off by two error when r0 equals zero
- VulnerabilityGHSA-5x2r-hc65-25f9 · 2026-01-28ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices
- Vulnerability MediumRUSTSEC-2025-0144 · 2025-12-12Timing side-channel in ML-DSA decomposition
Check your version
Run cargo tree -i ml-dsa to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?