ml-dsa (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package ml-dsa, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-22705 — CVSS 6.4 (medium): RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to…
• CVE-2026-24850 — CVSS 5.3 (medium): The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and…