Description
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | security-framework | < 0.1.12 | 0.1.12 | GHSA-jqqr-c2r2-9cvr |
| crates.io | security-framework | >= 0.0.0-0, < 0.1.12 | 0.1.12 | RUSTSEC-2017-0003 |