btctax-store (>=0.1.0, <=0.18.0), did-webkey (0.1.1) +4 more potentially affected by CVE-2023-53160 via sequoia-openpgp (1.14.0)

sequoia-openpgp CARGO version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sequoia-openpgp and may be impacted: - btctax-store =0.1.0, =0.3.0, =0.4.0-rc.1, =5.0.4 Source cves: CVE-2023-53160 Source advisory: OSV:RUSTSEC-2023-0038...

sequoia-openpgp (1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (1.1.3)

buffered-reader CARGO version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp 1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...

PT-2025-31039 · Unknown +1 · Sequoia-Openpgp +1

Name of the Vulnerable Software and Affected Versions: sequoia-openpgp crate versions prior to 1.16.0 Description: The sequoia-openpgp crate contains a flaw that allows out-of-bounds array access, potentially leading to a panic. Recommendations: Update to sequoia-openpgp crate version 1.16.0 or...

[SECURITY] Fedora 38 Update: rust-sequoia-sop-0.26.1-5.fc38

Implementation of the Stateless OpenPGP Interface using Sequoia...