rustls vulnerabilities
10 published CVEs name rustls among the affected products.
- 10Published CVEs10 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-123613
Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass
rustls · rustls
Medium6.9 - CVE-2026-123612
rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure
rustls · rustls
Medium4.6 - CVE-2026-123611
rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello
rustls · rustls
Medium6.3 - CVE-2026-123610
rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression
rustls · rustls
Medium6.3 - CVE-2026-123609
Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug
rustls · rustls
Medium4.1 - CVE-2026-93602
rustls-webpki before 0.103.10 CRL Revocation Check Bypass
rustls · webpki
Medium5.9 - CVE-2026-93601
rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass
rustls · webpki
Low2.1 - CVE-2026-93600
rustls webpki Name Constraints URI Validation Bypass
rustls · webpki
Low2.1 - CVE-2026-93599
rustls-webpki before 0.103.13 Panic via empty BIT STRING
rustls · webpki
High8.7 - CVE-2024-32650
Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input
rustls · rustls
High7.5