{"action":"Upgrade pgp to 0.14.1 or later.","affected":[{"fixed":"0.14.1","introduced":"0.0.0-0"}],"component":"pgp","cve_ids":["CVE-2024-53856"],"ecosystem":"crates.io","epss":0.00467,"exploited":false,"fixed_versions":["0.14.1"],"ghsa_id":"GHSA-9rmp-2568-59rv","id":"tcs_01M5KF9PY09YB3TJKBXHBGQCGH","modified_at":"2026-10-12T18:00:10.950989137Z","published_at":"2024-12-05T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0447","https://crates.io/crates/pgp","https://rustsec.org/advisories/RUSTSEC-2024-0447.html","https://github.com/rpgp/rpgp/commit/91b9f517f3bc38e7b14518a156bff81ee69301fc","https://github.com/radicallyopensecurity/ros-website/blob/8169b16fc138a0b0dde14dd0e222d1279701b4d3/ros-public-reports/ROS%20-%20NLNet%20-%20rPGP%20-%202024.pdf"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0447","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0447"}],"summary":"Panics on Malformed Untrusted Input"}