Description
An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | hyper | < 0.9.4 | 0.9.4 | GHSA-9xjr-m6f3-v5wm |
| crates.io | hyper | >= 0.0.0-0, < 0.9.4 | 0.9.4 | RUSTSEC-2016-0002 |