2026-08-03 - 2026-11-03
Overview
6 Issues closed from 1 user
Closed
#14 RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Closed
#11 RUSTSEC-2026-0049: CRLs not considered authoritative by Distribution Point due to faulty matching logic
Closed
#9 RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted
Closed
#12 RUSTSEC-2026-0104: Reachable panic in certificate revocation list parsing
Closed
#13 RUSTSEC-2025-0134: rustls-pemfile is unmaintained
Closed
#10 RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name
13 Issues created by 1 user
Opened
#9 RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted
Opened
#10 RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name
Opened
#13 RUSTSEC-2025-0134: rustls-pemfile is unmaintained
Opened
#12 RUSTSEC-2026-0104: Reachable panic in certificate revocation list parsing
Opened
#11 RUSTSEC-2026-0049: CRLs not considered authoritative by Distribution Point due to faulty matching logic
Opened
#14 RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Opened
#15 RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange
Opened
#18 RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets
Opened
#17 RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection
Opened
#16 RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication
Opened
#19 RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates
Opened
#20 RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates
Opened
#21 RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety