Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:17:17 +0000 EUVD-2026-80331 https://cve.radiocsirt.org/vuln/euvd-2026-80331 EUVD-2026-80331 https://cve.radiocsirt.org/vuln/euvd-2026-80331 fkie_cve-2017-18588 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18588 <p>An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.</p> <p>An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-18588 GHSA-jqqr-c2r2-9cvr — Improper Certificate Validation in security-framework https://cve.radiocsirt.org/vuln/ghsa-jqqr-c2r2-9cvr <p><strong>Affected:</strong> crates.io: security-framework</p> <p>If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check.</p> <p><strong>Affected:</strong> crates.io: security-framework</p> <p>If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check.</p> https://cve.radiocsirt.org/vuln/ghsa-jqqr-c2r2-9cvr gsd-2017-18588 https://cve.radiocsirt.org/vuln/gsd-2017-18588 gsd-2017-18588 https://cve.radiocsirt.org/vuln/gsd-2017-18588 RUSTSEC-2017-0003 — Hostname verification skipped when custom root certs used https://cve.radiocsirt.org/vuln/rustsec-2017-0003 <p><strong>Affected:</strong> crates.io: security-framework</p> <p>If custom root certificates were registered with a `ClientBuilder`, the hostname of the target server would not be validated against its presented leaf certificate.</p> <p>This issue was fixed by properly configuring the trust evaluation logic to perform that check.</p> <p><strong>Affected:</strong> crates.io: security-framework</p> <p>If custom root certificates were registered with a `ClientBuilder`, the hostname of the target server would not be validated against its presented leaf certificate.</p> <p>This issue was fixed by properly configuring the trust evaluation logic to perform that check.</p> https://cve.radiocsirt.org/vuln/rustsec-2017-0003