Rust advisories / crate
Security history · rustls-webpki · data from Oct 24, 2026
Is rustls-webpki safe to use? Its security history
VerdictNo open advisories. 6 past vulnerabilities were fixed; use 0.104.0-alpha.8 or newer to be clear of all of them.
6advisories on record
6vulnerabilities
0unmaintained notices
0.104.0-alpha.8newest fixed version
Every advisory, newest first
- VulnerabilityRUSTSEC-2026-0382 · 2026-10-20Certificate verification may accept distrusted intermediates
- VulnerabilityRUSTSEC-2026-0104 · 2026-04-22Reachable panic in certificate revocation list parsing
- VulnerabilityRUSTSEC-2026-0098 · 2026-04-14Name constraints for URI names were incorrectly accepted
- VulnerabilityRUSTSEC-2026-0099 · 2026-04-14Name constraints were accepted for certificates asserting a wildcard name
- VulnerabilityRUSTSEC-2026-0049 · 2026-03-20CRLs not considered authoritative by Distribution Point due to faulty matching logic
- Vulnerability HighRUSTSEC-2023-0053 · 2023-08-22rustls-webpki: CPU denial of service in certificate path building
Check your version
Run cargo tree -i rustls-webpki to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: rustls-webpki crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on itrustls-webpki crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?