2026-10-03 - 2026-11-03
Overview
There has been no commit activity in this period.
7 Issues created by 1 user
Opened
#15 RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange
Opened
#16 RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication
Opened
#17 RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection
Opened
#18 RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets
Opened
#19 RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates
Opened
#20 RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates
Opened
#21 RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety