RUSTSEC-2024-0333

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2024-0333

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0333.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2024-0333

Published

2024-04-06T12:00:00Z

Modified

2024-04-12T16:29:46Z

Summary

`rsa-export` is unmaintained

Details

This crate has been deprecated in favour of using the native support for exporting RSA keys into the standard PEM format.
See docs.rs documentation.

In addition to that, the operations in this crate (arithmetic and Base64 encoding) are not done in constant-time, potentially exposing the user to sidechannel attacks.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / rsa-export

Package

Name: rsa-export; View open source insights on deps.dev
Purl: pkg:cargo/rsa-export

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [],
        "os": []
    }
}