{"action":"Upgrade sequoia-openpgp to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0.0.0-0"}],"component":"sequoia-openpgp","cve_ids":["CVE-2025-67897"],"ecosystem":"crates.io","epss":0.00354,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-v6x3-9r38-r27q","id":"tcs_01M5KFAFHACMQ691C5B55XWEJK","modified_at":"2025-12-17T06:16:23.047289Z","published_at":"2025-11-07T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0136","https://crates.io/crates/sequoia-openpgp","https://rustsec.org/advisories/RUSTSEC-2025-0136.html","https://gitlab.com/sequoia-pgp/sequoia/-/blob/b59886e5e7bdf7169ed330f309a6633d131776e5/openpgp/NEWS#L7-L26"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0136","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0136"}],"summary":"Underflow in aes_key_unwrap function"}