Skip to content
OpenAdvisories

Package · Debian

rust-pgp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-53856

    rPGP Panics on Malformed Untrusted Input

    rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.

    rpgp rpgp pgp rust-pgp Debian crates.io
  • High 7.5
    CVE-2024-53857

    rPGP Potential Resource Exhaustion when handling Untrusted Messages

    rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows attackers to trigger resource exhaustion vulnerabilities in rpgp by providing crafted messages. This affects general message parsing and decryption with symmetric keys.

    rpgp rpgp pgp rust-pgp Debian crates.io