crates.io/rustls: medium 5.3
Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Action: Upgrade rustls to 0.23.45 or later.
cargo update -p rustls --precise 0.23.45Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.23.13 | 0.23.45 | - |
Fixed versions
| 0.23.45 |
Sources
- osv: GHSA-2mjx-qc3c-rqvc
- https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
- https://github.com/golang/go/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
- https://github.com/rustls/rustls/commit/98456aea708a7e3c6151e00ca2d4428e7a58257a
- https://github.com/rustls/rustls
- https://rustsec.org/advisories/RUSTSEC-2026-0285.html
published · modified · JSON