rustls vulnerabilities
CVEs whose affected-version data names the rustls package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
12 CVEsRSS
GHSA-h2v8-394m-p7vvLow· 3.7Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
GHSA-c8m5-c952-6cm4Medium· 4.0Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
GHSA-w44r-93j7-qv28Low· 3.7rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
GHSA-vp88-798v-h67fLow· 2.3rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
RUSTSEC-2026-0349Low· 3.7Unauthenticated ServerHello can downgrade later connections to classical key exchange
Unauthenticated ServerHello can downgrade later connections to classical key exchange
RUSTSEC-2026-0348Low· 3.7Brotli certificate decompression can allocate up to 1 GiB before authentication
Brotli certificate decompression can allocate up to 1 GiB before authentication
RUSTSEC-2026-0347Low· 2.3Buffered application data sent to outer server after ECH rejection
Buffered application data sent to outer server after ECH rejection
RUSTSEC-2026-0346Medium· 4.0`Debug` impls for client session values expose TLS secrets
`Debug` impls for client session values expose TLS secrets
CVE-2026-108266Critical· 9.1Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certi…
GHSA-2mjx-qc3c-rqvcMedium· 5.3Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
RUSTSEC-2026-0285Medium· 5.3TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
CVE-2024-32650High· 7.5`rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input
`rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input