Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
rustls
|
Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. | Low Risk 3.7 | 12 days ago | 13 hours ago |
|
rustls
|
Brotli certificate decompression can allocate up to 1 GiB before authentication | Low Risk 3.7 | 25 days ago | 13 hours ago |
|
rustls
|
Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | Medium Risk 5.3 | 1 month ago | 13 hours ago |
|
rustls
|
TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | Medium Risk 5.3 | 1 month ago | 13 hours ago |
|
rustls
|
rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share | Low Risk 3.7 | 12 days ago | 13 hours ago |
|
rustls
|
Unauthenticated ServerHello can downgrade later connections to classical key exchange | Low Risk 3.7 | 25 days ago | 13 hours ago |
|
rustls
|
rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert | Low Risk 2.3 | 12 days ago | 13 hours ago |
|
rustls
|
Buffered application data sent to outer server after ECH rejection | Low Risk 2.3 | 25 days ago | 13 hours ago |
|
rustls
|
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs | Medium Risk 4.0 | 12 days ago | 13 hours ago |
|
rustls
|
`Debug` impls for client session values expose TLS secrets | Medium Risk 4.0 | 25 days ago | 13 hours ago |
|
rustls-webpki
|
Certificate verification may accept distrusted intermediates | Unknown | 19 days ago | 10 days ago |
|
rustls-ffi
|
Use-after-free of caller-owned server name in client connection constructors | Unknown | 13 days ago | 12 days ago |
|
rustls
|
`rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input | High Risk 7.5 | 2 years ago | 27 days ago |
|
rustls-webpki
|
CRLs not considered authoritative by Distribution Point due to faulty matching logic | Unknown | 7 months ago | 1 month ago |
|
rustls-webpki
|
Name constraints for URI names were incorrectly accepted | Unknown | 6 months ago | 1 month ago |
|
rustls-webpki
|
Name constraints were accepted for certificates asserting a wildcard name | Unknown | 6 months ago | 1 month ago |
|
rustls-webpki
|
Reachable panic in certificate revocation list parsing | Unknown | 6 months ago | 1 month ago |
|
rustls-webpki
|
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic | Medium Risk 4.4 | 7 months ago | 1 month ago |
|
rustls-webpki
|
webpki: Name constraints were accepted for certificates asserting a wildcard name | Low Risk 2.2 | 6 months ago | 1 month ago |
|
rustls-webpki
|
rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | High Risk 7.5 | 6 months ago | 1 month ago |
|
rustls-webpki
|
webpki: Name constraints for URI names were incorrectly accepted | Low Risk 2.2 | 6 months ago | 1 month ago |
|
rustls
|
rustls network-reachable panic in `Acceptor::accept` | Medium Risk 6.0 | 1 year ago | 1 month ago |
|
rustls
|
Denial of Service Vulnerability in Rustls Library | High Risk 7.5 | 2 years ago | 1 month ago |
|
rustls-webpki
|
rustls-webpki: CPU denial of service in certificate path building | High Risk 7.5 | 3 years ago | 1 month ago |
|
rustls-webpki
|
rustls-webpki: CPU denial of service in certificate path building | High Risk 7.5 | 3 years ago | 9 months ago |
|
rustls-pemfile
|
rustls-pemfile is unmaintained | Unknown | 11 months ago | 11 months ago |
|
rustls
|
rustls network-reachable panic in `Acceptor::accept` | Unknown | 1 year ago | 1 year ago |
|
tokio-rustls
|
Excessive memory usage in tokio-rustls | High Risk 7.5 | 5 years ago | 3 years ago |
|
tokio-rustls
|
tokio-rustls reads may cause excessive memory usage | High Risk 7.5 | 6 years ago | 3 years ago |
Page 1