{"action":"Upgrade sequoia-openpgp to 1.21.0 or later.","affected":[{"fixed":"1.21.0","introduced":"1.13.0"}],"component":"sequoia-openpgp","cve_ids":["CVE-2024-58261"],"ecosystem":"crates.io","epss":0.00398,"exploited":false,"fixed_versions":["1.21.0"],"ghsa_id":"GHSA-9344-p847-qm5c","id":"tcs_01M5KF96EWCDZDJ27JVEYV0KKB","modified_at":"2025-10-28T06:29:08.241169Z","published_at":"2024-06-26T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0345","https://crates.io/crates/sequoia-openpgp","https://rustsec.org/advisories/RUSTSEC-2024-0345.html","https://gitlab.com/sequoia-pgp/sequoia/-/issues/1106"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0345","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0345"},{"source":"nvd","source_id":"CVE-2024-58261","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-58261"}],"summary":"Low severity (DoS) vulnerability in sequoia-openpgp"}