Skip to main content
VulnerabilityPublished

Vodozemac: Degraded secret zeroization capabilities

Affects vodozemacSource GCVE Database

0
Severity
Low

Rated Low by Threat Radar's AI analysis

Patch
Available – fixed in 0.11.2

Data as of 6 Nov 2026, 15:48 UTC

What to do

Upgrade vodozemac to 0.11.2.

Affected software

ProductAffectedFixed in
crates.iovodozemacpkg:cargo/vodozemacOther threatsAffected
  • >=0.11.0 <0.11.2
Fixed in
  • 0.11.2

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Upgrade to vodozemac version 0.11.2 or later, where the secret zeroization capabilities have been restored. No other mitigation is required.

Description

Versions 0.11.0 and 0.11.1 of vodozemac have degraded secret zeroization capabilities due to changes in third-party cryptographic dependencies. This results in more memory copies of encryption secrets and longer retention of secrets in memory, marginally increasing the risk of sensitive data exposure. The issue is fixed in version 0.11.2.

References

Community reviews

Loading reviews…