GHSA-g97w-mw7g-v3jv
Suggest an improvement- Source
- https://github.com/advisories/GHSA-g97w-mw7g-v3jv
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/07/GHSA-g97w-mw7g-v3jv/GHSA-g97w-mw7g-v3jv.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-g97w-mw7g-v3jv
- Withdrawn
- 2025-07-28T15:36:45Z
- Published
- 2025-07-27T21:32:11Z
- Modified
- 2025-07-28T15:36:45Z
- Severity
-
- 2.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- Duplicate Advisory: Low severity (DoS) vulnerability in sequoia-openpgp
- Details
-
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-9344-p847-qm5c. This link is maintained to preserve external references.
Original Description
The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type.
- Database specific
{ "cwe_ids": [ "CWE-835" ], "github_reviewed": true, "github_reviewed_at": "2025-07-28T15:36:45Z", "nvd_published_at": "2025-07-27T20:15:24Z", "severity": "LOW" }- References
Affected packages
crates.io / sequoia-openpgp
Package
- Name
- sequoia-openpgp
- View open source insights on deps.dev
- Purl
- pkg:cargo/sequoia-openpgp