rsa
crates.io2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting rsapage 1 of 1
- CVE-2023-49092MEDIUMCVSS 5.9EG 5.92023-11-28
RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able t…
- CVE-2026-21895MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.9.102026-01-08
The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is `1`. Version 0.9.10 fix…
Check whether rsa is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for rsa CVEs against the assets you own.
Start Free Scan →