https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:45:37.444534+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-18588 CVE-2017-18588 2026-10-02T20:45:37.476440+00:00

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.

 https://cve.radiocsirt.org/vuln/ghsa-jqqr-c2r2-9cvr GHSA-jqqr-c2r2-9cvr — Improper Certificate Validation in security-framework 2026-10-02T20:45:37.476493+00:00

Affected: crates.io: security-framework

If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check.