Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

sequoia-openpgp

3 known vulnerabilities (1 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium, 2 low
Registry
crates.io

Advisories 3

  • CVE-2025-67897Medium 5.3

    In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short.

    Affected: fixed in 2.1.0; fixed in 2.1.0.

  • The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.

    Affected: fixed in 1.1.1; from 1.2.0, fixed in 1.8.1; from 1.9.0, fixed in 1.16.0; fixed in 1.1.1; from 1.2.0, fixed in 1.8.1; from 1.9.0, fixed in 1.16.0.

  • The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet"…

    Affected: from 1.13.0, fixed in 1.21.0.