All products

rustls-webpki

Rust / Cargo · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
rustls-webpki: Denial of service via panic on malformed CRL BIT STRINGCVE-2026-93599 · GHSA-82J2-J2CH-GFR8Version ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat High Fix reported
webpki: Name constraints were accepted for certificates asserting a wildcard nameCVE-2026-93601 · GHSA-XGP8-3HG3-C2MHVersion ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Low Fix reported
webpki: Name constraints for URI names were incorrectly acceptedCVE-2026-93600 · GHSA-965H-392X-2MH5Version ranges need review. rustls-webpkiConfidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Rust / CargoRed Hat Low Fix reported
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logicCVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4Version ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Medium Fix reported
rustls-webpki: CPU denial of service in certificate path buildingGHSA-FH2R-99Q2-6MMG · RUSTSEC-2023-0053Version ranges need review. rustls-webpki Rust / Cargo High Fix reported