{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.9.6"}],"component":"rsa","cve_ids":["CVE-2023-49092"],"ecosystem":"crates.io","epss":0.0061,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4grx-2x9w-596c","id":"tcs_01M5KESMC2GXJ75M7BEB2FRJTS","modified_at":"2026-09-10T03:50:04.002228238Z","published_at":"2023-11-28T23:28:25Z","references":["https://osv.dev/vulnerability/GHSA-4grx-2x9w-596c","https://github.com/RustCrypto/RSA/security/advisories/GHSA-c38w-74pg-36hr","https://github.com/RustCrypto/RSA/issues/19#issuecomment-1822995643","https://github.com/RustCrypto/RSA/issues/626","https://github.com/RustCrypto/RSA","https://rustsec.org/advisories/RUSTSEC-2023-0071.html"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-4grx-2x9w-596c","url":"https://osv.dev/vulnerability/GHSA-4grx-2x9w-596c"}],"summary":"Marvin Attack: potential key recovery through timing sidechannels"}