{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"rsa","cve_ids":["CVE-2023-49092"],"ecosystem":"crates.io","epss":0.0061,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4grx-2x9w-596c","id":"tcs_01M5KF8N4KWFDT6970XEKQBZYD","modified_at":"2026-09-14T09:45:02.996132556Z","published_at":"2023-11-22T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0071","https://crates.io/crates/rsa","https://rustsec.org/advisories/RUSTSEC-2023-0071.html","https://github.com/RustCrypto/RSA/issues/626","https://github.com/RustCrypto/RSA/issues/19#issuecomment-1822995643","https://people.redhat.com/~hkario/marvin/","https://github.com/RustCrypto/RSA/pull/394","https://github.com/RustCrypto/RSA/pull/680","https://github.com/RustCrypto/RSA/pull/702"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0071","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0071"}],"summary":"Marvin Attack: potential key recovery through timing sidechannels"}