CVE-2024-53856 Information

Description

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1 rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.

Reference

https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv