1. rustls-webpki Flaws Expose TLS Libraries to Panic, Certificate Validation Bypass Risks
A security audit has identified three vulnerabilities in rustls-webpki, a widely deployed Rust library that handles X.509 certificate validation for TLS implementations. The findings, catalogued under RUSTSEC-2026-0104 and RUSTSEC-2026-0098, reveal critical flaws in certificate revocation list (CRL) parsing and URI nam...