-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rsa | rust | <= 0.9.6 |
Miggo AIRoot Cause AnalysisThe advisory and linked GitHub issue #19 specifically identify timing variations in rsa::internals::encrypt() through fuzzing tests. The function's role in RSA encryption/decryption operations makes it a prime candidate for key-related timing leaks. While modpow implementations are often vulnerable in RSA timing attacks, the provided evidence directly points to encrypt() as the measured vulnerable function. The confidence is high due to reproducible timing differences and explicit mention in the issue discussion.
RustRustOngoing coverage of React2Shell