Skip to content
OpenAdvisories

Product · rustls

webpki

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-93602

    rustls-webpki before 0.103.10 CRL Revocation Check Bypass

    rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a comprom…

    rustls webpki rustls-webpki rust-rustls-webpki Debian Ubuntu crates.io