rustls/webpki Security Advisories | GitStock

high2026-04-24

rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

GHSA-82j2-j2ch-gfr8

low2026-04-16

webpki: Name constraints were accepted for certificates asserting a wildcard name

GHSA-xgp8-3hg3-c2mh

low2026-04-16

webpki: Name constraints for URI names were incorrectly accepted

GHSA-965h-392x-2mh5

medium2026-03-20

webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

GHSA-pwjx-qhcg-rvj4

high2023-08-22

rustls-webpki: CPU denial of service in certificate path building

GHSA-fh2r-99q2-6mmg