[GHSA-9m44-rr2w-ppp7] Swift Crypto: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length

[identity-wael]

Updates

• References

Comments
Add the upstream fix commit for CVE-2026-28815.

The official Swift Crypto 4.3.1 release explicitly identifies this CVE and links commit bb4ba815dab96d4edc1e0b86d7b9acf9ff973a84 as its fix: https://github.com/apple/swift-crypto/releases/tag/4.3.1

The patch adds a guard requiring encapsulated.count == Int(XWING_CIPHERTEXT_BYTES) before calling the C decapsulation API in OpenSSLXWingPrivateKeyImpl.decapsulate. It also adds testDecapsulateInputValidation regression coverage for malformed ciphertext lengths. This directly addresses the missing fixed-length validation described in this advisory.

The current references include the upstream advisory and NVD record but omit the fix commit. Adding this primary-source reference helps downstream readers inspect the patch and assess backports. No version, severity, or description changes are proposed.

[github]

Hi there @Lukasa! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory