Rust advisories / crate
Security history · sodiumoxide · data from Oct 24, 2026
Is sodiumoxide safe to use? Its security history
VerdictUnmaintained. RustSec marked sodiumoxide unmaintained (RUSTSEC-2021-0137), so new security bugs will not be fixed.
3advisories on record
2vulnerabilities
1unmaintained notices
0.2.5newest fixed version
Every advisory, newest first
- UnmaintainedRUSTSEC-2021-0137 · 2021-10-22sodiumoxide is deprecated
- Vulnerability CriticalRUSTSEC-2019-0026 · 2019-10-11generichash::Digest::eq always return true
- Vulnerability MediumRUSTSEC-2017-0001 · 2017-01-26scalarmult() vulnerable to degenerate public keys
Check your version
Run cargo tree -i sodiumoxide to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?