rustls webpki

4 known vulnerabilities in rustls webpki, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-93602 CVSS 5.9 medium rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first…
  • CVE-2026-93601 CVSS 2.1 low rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted…
  • CVE-2026-93600 CVSS 2.1 low rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name…
  • CVE-2026-93599 CVSS 8.7 high rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in…