Cloudanix VulnDB

RUSTSEC-2025-0136

Medium · 4.3

CVSS

4.3

EPSS

—

Published

Nov 7, 2025

CISA due date

—

The record

Underflow in aes_key_unwrap function

Affected packages

Ecosystem	Package	Introduced	Fixed
crates.io	sequoia-openpgp	0	2.1.0
crates.io	sequoia-openpgp	0.0.0-0	2.1.0

Related vulnerabilities

CVE-2025-67897 In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. Same vulnerability