Versions 0.11.1 and earlier of vodozemac have a vulnerability where the Olm root key ratchet does not zeroize HKDF output after use. This results in copies of root and chain keys remaining in freed heap memory. An attacker with memory access could recover these keys, compromising forward secrecy for affected sessions.