Is openmls affected by GHSA-8x3w-qj7j-gqhf?

crates.io openmls is affected in <0.7.2.

Is GHSA-8x3w-qj7j-gqhf being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

high

GHSA-8x3w-qj7j-gqhf

Q: Is GHSA-8x3w-qj7j-gqhf being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

crates.io · openmls

Summary

openmls has improper tag validation

Severity: high
Published: 2026-02-04

References

https://github.com/openmls/openmls/security/advisories/GHSA-8x3w-qj7j-gqhf
https://github.com/openmls/openmls/commit/91ec049ffc2fa3766110223aa2aabe0303837af8
https://github.com/openmls/openmls

Related advisories

GHSA-qr9h-x63w-vqfm — medium · crates.io/openmls

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.