rustls-webpki has 4 CVEs on record. The busiest recent month was April 2026 with 3.
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- —
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- rustls-webpki 4
4
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
RUSTSEC-2026-0104NoneReachable panic in certificate revocation list parsing3RUSTSEC-2026-0099NoneName constraints were accepted for certificates asserting a wildcard name3RUSTSEC-2026-0098NoneName constraints for URI names were incorrectly accepted3RUSTSEC-2026-0049NoneCRLs not considered authoritative by Distribution Point due to faulty matching logic3
rustls-webpki vulnerabilities
CVEs affecting rustls-webpki, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
RUSTSEC-2026-0104NoneReachable panic in certificate revocation list parsing
Reachable panic in certificate revocation list parsing
▾ Sunlitrustls-webpki · rustls-webpkivia OSV
RUSTSEC-2026-0099NoneName constraints were accepted for certificates asserting a wildcard name
Name constraints were accepted for certificates asserting a wildcard name
▾ Sunlitrustls-webpki · rustls-webpkivia OSV
RUSTSEC-2026-0098NoneName constraints for URI names were incorrectly accepted
Name constraints for URI names were incorrectly accepted
▾ Sunlitrustls-webpki · rustls-webpkivia OSV
RUSTSEC-2026-0049NoneCRLs not considered authoritative by Distribution Point due to faulty matching logic
CRLs not considered authoritative by Distribution Point due to faulty matching logic
▾ Sunlitrustls-webpki · rustls-webpkivia OSV