The Lab · 2026-04-23 00:54:11 · GitHub Issues
A validation defect in the rustls-webpki cryptographic library allowed name constraints for URI names to be incorrectly accepted, potentially opening a path for certificate misissuance exploitation in TLS handshake contexts. The vulnerability, tracked as RUSTSEC-2026-0098 and linked to GHSA-965h-392x-2mh5, was discover...
The Lab · 2026-04-25 04:54:08 · GitHub Issues
A security audit has identified three vulnerabilities in rustls-webpki, a widely deployed Rust library that handles X.509 certificate validation for TLS implementations. The findings, catalogued under RUSTSEC-2026-0104 and RUSTSEC-2026-0098, reveal critical flaws in certificate revocation list (CRL) parsing and URI nam...
The Lab · 2026-05-09 14:01:40 · GitHub Issues
The rustls-webpki cryptographic library has issued version 0.103.13, patching two security vulnerabilities that could compromise certificate validation in Rust-based TLS implementations. The more severe issue—a reachable panic triggered during Certificate Revocation List (CRL) parsing—was disclosed under security advis...
The Lab · 2026-05-10 15:32:01 · GitHub Issues
Trois avis de sécurité RUSTSEC actifs menacent la chaîne de dépendances du projet kalidoku-server, exposant une surface d'attaque liée aux certificats TLS. Les vulnérabilités RUSTSEC-2026-0098 et RUSTSEC-2026-0099 affectent rustls-webpki 0.101.7, avec des défauts critiques dans la validation des contraintes de noms URI...