Vulnerability GHSA-9c48-w39g-hm26
Low Risk
LOW RISK
CVSS Score: 3.0
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
10 months ago
January 06, 2026 at 06:14 PM UTC
rsa crate has potential panic on a prime being equal to 1
<0.9.10
<0.9.10
Summary
rsa crate has potential panic on a prime being equal to 1
Details
When creating a RSA private key from its components, the construction panics, instead of returning an error, when one of the primes is 1.
Discovered by Christian Reitter from Radically Open Security during a security review for Proton AG.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Marvin Attack: potential key recovery through timing sidechannels
<=0.9.6 GHSA-c38w-74pg-36hr
<=0.9.6 GHSA-c38w-74pg-36hr
Medium Risk
2 years ago
Marvin Attack: potential key recovery through timing sidechannels
<=0.9.6 GHSA-4grx-2x9w-596c
<=0.9.6 GHSA-4grx-2x9w-596c
Medium Risk
2 years ago
Marvin Attack: potential key recovery through timing sidechannels
>=0.0.0-0 <0.10.0 RUSTSEC-2023-0071
>=0.0.0-0 <0.10.0 RUSTSEC-2023-0071
Impacted packages
Timeline
Published
10 months ago
January 06, 2026 at 06:14 PM UTC
Fixed (0.9.10)
10 months ago
January 06, 2026 at 03:00 PM UTC
Last Modified
2 months ago
September 10, 2026 at 03:50 AM UTC