Vulnerability RUSTSEC-2026-0383
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 day ago
October 19, 2026 at 12:00 PM UTC
Bundled root certificates allow trust in distrusted emSign intermediates
0.26.4 - 1.0.9
0.26.4 - 1.0.9
Summary
Bundled root certificates allow trust in distrusted emSign intermediates
Details
Affected versions include emSign ECC Root CA - G3, which can allow certificate paths through distrusted emSign intermediates.
Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well known.
Version 1.0.10+ removes this root.
Impacted packages
Timeline
Published
1 day ago
October 19, 2026 at 12:00 PM UTC
Fixed (1.0.10)
1 day ago
October 19, 2026 at 08:11 PM UTC
Last Modified
2 hours ago
October 21, 2026 at 12:55 AM UTC