Skip to content
OpenAdvisories

Package · Debian

rust-rustls

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-123613

    Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass

    Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record, because Deframer::aligned does not enforce RFC 8446 record-boundary alignment. A peer or on-path at…

    rustls rustls rustls rust-rustls Debian crates.io
  • Medium 4.0
    CVE-2026-123609

    Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug

    Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client session values exposes secret key material. Custom ClientSessionStore implementations that log Tls12ClientSess…

    rustls rustls rustls rust-rustls Debian crates.io