Skip to content
OpenAdvisories

Package · crates.io

x509-validator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    GHSA-39mm-4q6x-3vrx

    Excluded iPAddress name constraints with an all-zero mask are not applied

    An `excluded_subtrees` iPAddress name constraint with an all-zero mask (`0.0.0.0/0` or `::/0`) does not restrict iPAddress SANs in certificates issued beneath it. The mask check treated an all-zero mask as matching nothing, when a `/0` prefix matches every ad…

    x509-validator crates.io