{"action":"Upgrade aws-lc-fips-sys to 0.13.13 or later.","affected":[{"fixed":"0.13.13","introduced":"0.13.0"}],"component":"aws-lc-fips-sys","cve_ids":["CVE-2026-4428"],"ecosystem":"crates.io","epss":0.00257,"exploited":false,"fixed_versions":["0.13.13"],"ghsa_id":"GHSA-9f94-5g5w-gf6r","id":"tcs_01M5KEWBTTWTTYQN0R1NBSWTFE","modified_at":"2026-09-10T03:50:38.508589596Z","published_at":"2026-03-20T20:35:14Z","references":["https://osv.dev/vulnerability/GHSA-9f94-5g5w-gf6r","https://github.com/aws/aws-lc-rs/security/advisories/GHSA-9f94-5g5w-gf6r","https://aws.amazon.com/security/security-bulletins/2026-010-AWS","https://github.com/aws/aws-lc-rs","https://rustsec.org/advisories/RUSTSEC-2026-0042.html","https://rustsec.org/advisories/RUSTSEC-2026-0048.html"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-9f94-5g5w-gf6r","url":"https://osv.dev/vulnerability/GHSA-9f94-5g5w-gf6r"}],"summary":"CRL Distribution Point Scope Check Logic Error in AWS-LC"}