rustls
Cargolatest 0.23.46 · 2026-10-14crates.io · all 118 versions
Security advisories4
- rustls: Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesfixed in 0.23.45
- rustls: Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKsfixed in 0.23.46, 0.24.0-dev.2
- rustls: Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.fixed in 0.23.46, 0.24.0-dev.2
- rustls: rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 sharefixed in 0.23.46, 0.24.0-dev.2
Versions that change something
- 0.23.452026-09fixes 1 advisory
- 0.23.46latest2026-10fixes 3 advisories
- 0.24.0-dev.22026-10fixes 3 advisories