{"action":"Upgrade sequoia-openpgp to 1.21.0 or later.","affected":[{"fixed":"1.21.0","introduced":"1.13.0"}],"component":"sequoia-openpgp","cve_ids":["CVE-2024-58261"],"ecosystem":"crates.io","epss":0.00428,"exploited":false,"fixed_versions":["1.21.0"],"ghsa_id":"GHSA-9344-p847-qm5c","id":"tcs_01M5KEW320AH84VMR8XS3HP2YW","modified_at":"2025-10-28T06:29:08.241169Z","published_at":"2024-06-26T19:10:15Z","references":["https://osv.dev/vulnerability/GHSA-9344-p847-qm5c","https://nvd.nist.gov/vuln/detail/CVE-2024-58261","https://gitlab.com/sequoia-pgp/sequoia","https://gitlab.com/sequoia-pgp/sequoia/-/issues/1106","https://rustsec.org/advisories/RUSTSEC-2024-0345.html"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"GHSA-9344-p847-qm5c","url":"https://osv.dev/vulnerability/GHSA-9344-p847-qm5c"}],"summary":"Low severity (DoS) vulnerability in sequoia-openpgp"}