ed25519-dalek

crates.io1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting ed25519-dalekpage 1 of 1

CVE-2022-50237MEDIUMCVSS 5.9EG 5.9✓ Fixed in 2.0.0
2025-07-28
The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key.

Check whether ed25519-dalek is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for ed25519-dalek CVEs against the assets you own.

Start Free Scan →