{"action":"Upgrade sequoia-openpgp to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0.0.0-0"},{"fixed":"1.8.1","introduced":"1.2.0"},{"fixed":"1.16.0","introduced":"1.9.0"}],"component":"sequoia-openpgp","cve_ids":["CVE-2023-53160"],"ecosystem":"crates.io","epss":0.00325,"exploited":false,"fixed_versions":["1.1.1","1.8.1","1.16.0"],"ghsa_id":"GHSA-25mx-8f3v-8wh7","id":"tcs_01M5KF8FA0XJQYD893F695AXK4","modified_at":"2025-10-28T06:02:18Z","published_at":"2023-05-16T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0038","https://crates.io/crates/sequoia-openpgp","https://rustsec.org/advisories/RUSTSEC-2023-0038.html","https://lists.sequoia-pgp.org/hyperkitty/list/announce@lists.sequoia-pgp.org/thread/SN2E3QRT4DMQ5JNEK6VIN6DJ5SH766DI/","https://gitlab.com/sequoia-pgp/sequoia/-/tags/openpgp%2Fv1.16.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0038","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0038"}],"summary":"Out-of-bounds array access leads to panic"}