Swift Crypto 5.0.3: VOPRF blind and evaluate APIs do not enforce the RFC 9497 input length limit (CVE-2026-86983)

Users of Swift Crypto should update to 5.0.3 as soon as practically possible, which addresses the following security issues: VOPRF blind and evaluate APIs do not enforce the RFC 9497 input length limit (CVE-2026-86983) A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. Affected versions: >= 3.10.0, <= 5.0.2 For more details, please read the GitHub Security Advisory: VOPRF blind and evaluate APIs do n...