crates.io security-framework vulnerabilities

Latest crates.io security-framework CVEs

Newest publication first

1. CVE-2017-18588 Improper Certificate Validation in security-framework

   Published 2019-08-26

   Medium·CVSS 5.3 EPSS 0.65%

   An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.