RUSTSEC-2025-0073Published
Alloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-62370 · Microsoft / collected KEV context
cve-program · CVE-2025-62370
- https://github.com/alloy-rs/core/security/advisories/GHSA-pgp9-98jm-wwq2
- https://github.com/alloy-rs/core/commit/7823e9af8c20e9fcfb5360f5eafd891c457ebccf
- https://crates.io/crates/alloy-dyn-abi/0.8.26
- https://crates.io/crates/alloy-dyn-abi/1.4.1
- https://rustsec.org/advisories/RUSTSEC-2025-0073.html
euvd · EUVD-2025-34683
- https://github.com/alloy-rs/core/security/advisories/GHSA-pgp9-98jm-wwq2
- https://github.com/alloy-rs/core/commit/7823e9af8c20e9fcfb5360f5eafd891c457ebccf
- https://crates.io/crates/alloy-dyn-abi/0.8.26
- https://crates.io/crates/alloy-dyn-abi/1.4.1
- https://rustsec.org/advisories/RUSTSEC-2025-0073.html
nvd · CVE-2025-62370
- https://crates.io/crates/alloy-dyn-abi/0.8.26
- https://crates.io/crates/alloy-dyn-abi/1.4.1
- https://github.com/alloy-rs/core/commit/7823e9af8c20e9fcfb5360f5eafd891c457ebccf
- https://github.com/alloy-rs/core/security/advisories/GHSA-pgp9-98jm-wwq2
- https://rustsec.org/advisories/RUSTSEC-2025-0073.html
osv · GHSA-pgp9-98jm-wwq2
- https://github.com/alloy-rs/core/security/advisories/GHSA-pgp9-98jm-wwq2
- https://nvd.nist.gov/vuln/detail/CVE-2025-62370
- https://github.com/alloy-rs/core/commit/7823e9af8c20e9fcfb5360f5eafd891c457ebccf
- https://crates.io/crates/alloy-dyn-abi/0.8.26
- https://crates.io/crates/alloy-dyn-abi/1.4.1
- https://github.com/alloy-rs/core
- https://rustsec.org/advisories/RUSTSEC-2025-0073.html
osv · RUSTSEC-2025-0073
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.