crates.io/rustls CVE-2024-11738: medium, EPSS 0.73%

rustls network-reachable panic in `Acceptor::accept`

Action: Upgrade rustls to 0.23.18 or later.

cargo update -p rustls --precise 0.23.18

Affected

Fixed versions

Sources

• osv: GHSA-qg5g-gv98-5ffh
• https://github.com/rustls/rustls/issues/2227
• https://github.com/rustls/rustls
• https://rustsec.org/advisories/RUSTSEC-2024-0399.html

CVE-2024-11738 · published 2024-11-25T16:57:34Z · modified 2026-09-10T03:50:21.002934679Z · JSON