Threats affecting pkg:cargo/vodozemac

Versions 0.11.1 and earlier of vodozemac have a vulnerability where the Olm root key ratchet does not zeroize HKDF output after use. This results in copies of root and chain keys remaining in freed heap memory. An attacker with memory access could recover these keys, compromising forward secrecy for affected sessions.

Versions 0.11.0 and 0.11.1 of vodozemac have degraded secret zeroization capabilities due to changes in third-party cryptographic dependencies. This results in more memory copies of encryption secrets and longer retention of secrets in memory, marginally increasing the risk of sensitive data exposure. The issue is fixed in version 0.11.2.