Vulnerability in Rustcrypto Rsa
CVE-2026-21895
The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is `1`. Version 0.9.10 fix…
EPSS: 0.000 (6.7th percentile) — read the EPSS interpretation.
Affected products
- Rustcrypto Rsa — versions < 0.9.10
Weakness classification (CWE)
References
- https://github.com/RustCrypto/RSA/security/advisories/GHSA-9c48-w39g-hm26 (x_refsource_CONFIRM)
- https://github.com/RustCrypto/RSA/commit/2926c91bef7cb14a7ccd42220a698cf4b1b692f7 (x_refsource_MISC)