crates.io/rustls-webpki: high 7.5
rustls-webpki: CPU denial of service in certificate path building
Action: Upgrade rustls-webpki to 0.100.2 or later.
cargo update -p rustls-webpki --precise 0.100.2cargo update -p rustls-webpki --precise 0.101.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.100.2 | - |
| 0.101.0 | 0.101.4 | - |
Fixed versions
| 0.100.2 | 0.101.4 |
Sources
- osv: GHSA-fh2r-99q2-6mmg
- https://github.com/rustls/webpki/commit/4ea052366f342a06344aab589565179b59b342d3
- https://github.com/rustls/webpki/commit/dcad2406c92169b72c110dd12183fcc74035b683
- https://github.com/advisories/GHSA-8qv2-5vq6-g2g7
- https://github.com/rustls/webpki
- https://rustsec.org/advisories/RUSTSEC-2023-0053.html
published · modified · JSON