Address RUSTSEC-2023-0071: Marvin Attack in RSA #253
Description
Security Advisory
Advisory ID: RUSTSEC-2023-0071
Severity: Medium (5.9)
Issue: Marvin Attack in RSA
Current Status
- Crate: rsa 0.9.10
- Dependency Type: Transitive (sqlx-mysql -> sqlx -> sea-orm)
- Status: No fixed upstream version available. Would require coordinated migration across sqlx/sea-orm ecosystem.
- Review by: 2026-12-31
Context
This advisory is currently being ignored in .cargo/audit.toml as part of PR #250.
Action Required
Monitor upstream for fixes and evaluate migration options when available.
References
- PR: feat(ci): Add audit workflow #250
- Requested by: @tolbrino