GHSA-8h58-w33p-wq3g
NoneCVSS
—
EPSS
—
Published
Feb 13, 2026
CISA due date
—
The record
rPGP affected by crash in message handling for deeply nested messages
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | pgp | 0.16.0-alpha.0 | 0.19.0 |
Related vulnerabilities
- GHSA-c7ph-f7jm-xv4w rPGP's integrity protection of encrypted data was not always checked Also affects pgp
- GHSA-7587-4wv6-m68m rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895 Also affects pgp
- CVE-2026-107705 Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in… CWE-121
- CVE-2026-95818 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc)… CWE-121
- CVE-2026-61548 Rsyslog is a rocket-fast system for log processing. CWE-121
- CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. CWE-121
- CVE-2026-19542 Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may… CWE-121
- CVE-2026-15419 In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged… CWE-121