Vulnerabilities in sequoia-pgp
4 resultsCVE-2024-58261LOWThe sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" mesEPSS 0.3%CVE-2023-53161LOWThe buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.EPSS 0.3%CVE-2025-67897MEDIUMIn Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue EPSS 0.3%CVE-2023-53160LOWThe sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.EPSS 0.3%