GHSA-c7ph-f7jm-xv4w
NoneCVSS
—
EPSS
—
Published
Feb 13, 2026
CISA due date
—
The record
rPGP's integrity protection of encrypted data was not always checked
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | pgp | 0.16.0-alpha.0 | 0.19.0 |
Related vulnerabilities
- GHSA-8h58-w33p-wq3g rPGP affected by crash in message handling for deeply nested messages Also affects pgp
- GHSA-7587-4wv6-m68m rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895 Also affects pgp
- CVE-2026-35501 When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both… CWE-354
- CVE-2026-85747 Distribution is a toolkit to pack, ship, store, and deliver container content. CWE-354
- CVE-2026-20354 Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME)… CWE-354
- CVE-2026-82549 A vulnerability was identified in Linux Foundation Magma 1.9.0. CWE-354
- CVE-2025-61480 An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a… CWE-354
- CVE-2026-75803 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can… CWE-354