PT-2026-120337 · Crates.Io · Rustls-Webpki

Published

2026-10-20

·

Updated

2026-10-20

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Affected versions may accept certificate paths containing distrusted emSign intermediate public keys when the configured trust anchors allow such paths. The private keys corresponding to these intermediates are now well known.
Versions 0.103.16 and 0.104.0-alpha.8 reject paths containing these public keys.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

RUSTSEC-2026-0382

Affected Products

Rustls-Webpki