crates.io/pgp CVE-2024-53856: high 7.5, EPSS 0.47%

Panics on Malformed Untrusted Input

Action: Upgrade pgp to 0.14.1 or later.

cargo update -p pgp --precise 0.14.1

Affected

Fixed versions

Sources

• osv: RUSTSEC-2024-0447
• https://crates.io/crates/pgp
• https://rustsec.org/advisories/RUSTSEC-2024-0447.html
• https://github.com/rpgp/rpgp/commit/91b9f517f3bc38e7b14518a156bff81ee69301fc
• https://github.com/radicallyopensecurity/ros-website/blob/8169b16fc138a0b0dde14dd0e222d1279701b4d3/ros-public-reports/ROS%20-%20NLNet%20-%20rPGP%20-%202024.pdf

CVE-2024-53856 · published 2024-12-05T12:00:00Z · modified 2026-10-12T18:00:10.950989137Z · JSON