GHSA-7587-4wv6-m68m
NoneCVSS
—
EPSS
—
Published
Feb 13, 2026
CISA due date
—
The record
rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | pgp | 0.16.0-alpha.0 | 0.19.0 |
Related vulnerabilities
- GHSA-c7ph-f7jm-xv4w rPGP's integrity protection of encrypted data was not always checked Also affects pgp
- GHSA-8h58-w33p-wq3g rPGP affected by crash in message handling for deeply nested messages Also affects pgp
- CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-703
- CVE-2026-57445 Gardens v2 is a modular governance framework that enables communities to create and… CWE-703
- CVE-2026-82417 ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own… CWE-703
- CVE-2026-26446 Stomper 5e2741e is vulnerable to Denial of Service. CWE-703
- CVE-2026-18638 Any authenticated Velociraptor user — including one holding only the readerrole — can… CWE-703
- CVE-2026-56818 Netty is an asynchronous, event-driven network application framework. CWE-703