Ssequoia-pgp

Products

Exploited and recent CVEs

• CVE-2025-67897 Medium 5.3 In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted mes 0.4%
• CVE-2023-53161 Low 2.9 The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic. 0.4%
• CVE-2023-53160 Low 2.9 The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic. 0.3%
• CVE-2024-58261 Low 2.9 The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsuppo 0.4%