Rust advisories / crate
Security history · pgp · data from Oct 24, 2026
Is pgp safe to use? Its security history
VerdictNo open advisories. 5 past vulnerabilities were fixed; use 0.14.1 or newer to be clear of all of them.
5advisories on record
5vulnerabilities
0unmaintained notices
0.14.1newest fixed version
Every advisory, newest first
- VulnerabilityGHSA-c7ph-f7jm-xv4w · 2026-02-13rPGP's integrity protection of encrypted data was not always checked
- VulnerabilityGHSA-8h58-w33p-wq3g · 2026-02-13rPGP affected by crash in message handling for deeply nested messages
- VulnerabilityGHSA-7587-4wv6-m68m · 2026-02-13rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895
- VulnerabilityGHSA-4grw-m28r-q285 · 2024-12-05rPGP Potential Resource Exhaustion when handling Untrusted Messages
- Vulnerability HighRUSTSEC-2024-0447 · 2024-12-05Panics on Malformed Untrusted Input
Check your version
Run cargo tree -i pgp to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?