https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:45:51 +0000 https://cve.radiocsirt.org/vuln/cve-2017-18588 <p>An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.</p> <p>An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.</p> https://cve.radiocsirt.org/vuln/cve-2017-18588 https://cve.radiocsirt.org/vuln/ghsa-jqqr-c2r2-9cvr <p><strong>Affected:</strong> crates.io: security-framework</p> <p>If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check.</p> <p><strong>Affected:</strong> crates.io: security-framework</p> <p>If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check.</p> https://cve.radiocsirt.org/vuln/ghsa-jqqr-c2r2-9cvr