{"action":"Upgrade x509-validator to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0.0.0-0"}],"component":"x509-validator","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-39mm-4q6x-3vrx","id":"tcs_01M5KFCAW7S3BKETYCZP7341S1","modified_at":"2026-09-28T09:45:02.969451461Z","published_at":"2026-09-24T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0312","https://crates.io/crates/x509-validator","https://rustsec.org/advisories/RUSTSEC-2026-0312.html","https://github.com/namecare/x509-validator/commit/da661f8ecee820e05d089a76ecb654ff52a2c987"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0312","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0312"}],"summary":"Excluded iPAddress name constraints with an all-zero mask are not applied"}