crates.io/pgp CVE-2024-53856: high 7.5, EPSS 0.47%

rPGP Panics on Malformed Untrusted Input

Action: Upgrade pgp to 0.14.1 or later.

cargo update -p pgp --precise 0.14.1

Affected

Fixed versions

Sources

• osv: GHSA-9rmp-2568-59rv
• https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv
• https://nvd.nist.gov/vuln/detail/CVE-2024-53856
• https://github.com/rpgp/rpgp
• https://rustsec.org/advisories/RUSTSEC-2024-0447.html

CVE-2024-53856 · published 2024-12-05T17:30:52Z · modified 2025-12-26T17:38:33.900409Z · JSON