Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  gitcellar/gitcellar-crypto#7 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  gitcellar/gitcellar-crypto#6 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  gitcellar/gitcellar-crypto#5 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  gitcellar/gitcellar-crypto#4 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  gitcellar/gitcellar-crypto#3 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  gitcellar/gitcellar-crypto#2 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  gitcellar/gitcellar-crypto#1 · Filter by author github-actions opened on Oct 19, 2026