crates.io/rsa CVE-2026-21895: medium 5.3, EPSS 0.44%

rsa crate has potential panic on a prime being equal to 1

Action: Upgrade rsa to 0.9.10 or later.

cargo update -p rsa --precise 0.9.10

Affected

Fixed versions

Sources

• osv: GHSA-9c48-w39g-hm26
• nvd: CVE-2026-21895
• https://github.com/RustCrypto/RSA/security/advisories/GHSA-9c48-w39g-hm26
• https://github.com/RustCrypto/RSA/commit/2926c91bef7cb14a7ccd42220a698cf4b1b692f7
• https://github.com/RustCrypto/RSA

CVE-2026-21895 · published 2026-01-06T18:14:08Z · modified 2026-09-10T03:50:32.802096391Z · JSON