Skip to content
OpenAdvisories

Vendor

rustls

10 known vulnerabilities.

Products

rustls 6 webpki 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-93599

    rustls-webpki before 0.103.13 Panic via empty BIT STRING

    rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no…

    rustls webpki rustls-webpki rust-rustls-webpki Debian Ubuntu crates.io
  • High 7.5
    CVE-2024-32650

    Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input

    Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a `close_notify` message immediately after `client_hello`, t…

    rustls rustls rustls rust-rustls Debian Ubuntu crates.io