TI-2026-02241 CVE-2026-2625 · GHSA-p6j6-g4fc-g496
Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification
Priority LOW 23
A flaw was found in rust-rpm-sequoia.
Vulnerabilities
5 records
TI-2025-41510 CVE-2025-67897 · GHSA-v6x3-9r38-r27q
In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short.
Priority LOW 24
In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short.
TI-2023-29457 CVE-2023-53161 · GHSA-29mf-62xx-28jq
The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.
Priority LOW 24
The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.
TI-2023-29456 CVE-2023-53160 · GHSA-25mx-8f3v-8wh7
The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.
Priority LOW 24
The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.
TI-2024-38362 CVE-2024-58261 · GHSA-9344-p847-qm5c
Infinite loop in sequoia-pgp sequoia
Priority HIGH 66
The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key typ…