search

ramosbugs / openidconnect-rs

OpenID Connect Library for Rust
MIT License
372 stars 98 forks source link

`rsa` crate is vulnerable to timing attack (RUSTSEC-2023-0071) #140

Open ramosbugs opened 7 months ago

ramosbugs commented 7 months ago

See https://rustsec.org/advisories/RUSTSEC-2023-0071.html and RustCrypto/RSA#19.

Once a fix is available, this crate should update the minimum required version of rsa in Cargo.toml.