Critical flaw in rustls-webpki: denial of service via CRL BIT STRING

A vulnerability in rustls-webpki allows denial of service via a malformed CRL.

Published 2sem2 sources✓ ConfirmedNotableupdated 2sem

≈ 18sSpeed

The fact

Exploiting this flaw can cause a fatal error in applications using the library.

Developers are urged to update their dependencies immediately.

2 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 2 media sources · identified on July 1, 2026