Devolutions / Devolutions/sspi-rs
Security: `rsa` dependency vulnerable to Marvin Attack (RUSTSEC-2023-0071)
Open
- Dominant language
- Rust
- Stars
- 83
- Forks
- 50
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 9
Description
Identified vulnerability [`RUSTSEC-2023-0071`][1] (Marvin Attack) in the `rsa` dependency.
Currently, it seems there is no fix available. It might be possible to consider avoiding using `rsa` or mitigating the impacted part of this crate (if any) affected.
Opening this issue merely for tracking, bringing visibility, and having a place where to add context if needed (affected part of the code, suggestions, etc).
[1]: https://rustsec.org/advisories/RUSTSEC-2023-0071
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.