{"action":"Upgrade rustls to 0.23.45 or later.","affected":[{"fixed":"0.23.45","introduced":"0.23.13"}],"component":"rustls","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.23.45"],"ghsa_id":"GHSA-2mjx-qc3c-rqvc","id":"tcs_01M5KFC6TERM0N322S927X7WPG","modified_at":"2026-10-12T18:00:10.944958251Z","published_at":"2026-09-14T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0285","https://crates.io/crates/rustls","https://rustsec.org/advisories/RUSTSEC-2026-0285.html","https://github.com/rustls/rustls/pull/3265"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0285","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0285"}],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries"}