crates.io/security-framework CVE-2017-18588: medium 5.3, EPSS 0.65%

Improper Certificate Validation in security-framework

Action: Upgrade security-framework to 0.1.12 or later.

cargo update -p security-framework --precise 0.1.12

Affected

Fixed versions

Sources

• osv: GHSA-jqqr-c2r2-9cvr
• https://nvd.nist.gov/vuln/detail/CVE-2017-18588
• https://github.com/sfackler/rust-security-framework/pull/27
• https://github.com/sfackler/rust-security-framework
• https://rustsec.org/advisories/RUSTSEC-2017-0003.html

CVE-2017-18588 · published 2021-08-25T20:42:59Z · modified 2023-11-08T03:59:16.345668Z · JSON