webpki vulnerabilities

1 known vulnerability in webpki from Rustls. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  webpki: Integer Underflow (Wrap or Wraparound)

  CVE-2026-93599Sep 18, 2026Rustls

  rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no