Threats tagged 'rustsec-2026-0346'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.1	EPSS 0.1%	CVE-2026-123609Rustls · `Debug` impls for client session values expose TLS secrets Medium4.1EPSS 0.1%2026-10-14GCVE DatabaseCVE-2026-123609 A vulnerability in rustls versions >=0.21.0 and <0.23.46 causes the Debug implementations of Tls12ClientSessionValue and Tls13ClientSessionValue to expose sensitive TLS secrets such as the TLS 1.2 master secret or TLS 1.3 resumption PSK when formatted. This can lead to disclosure of these secrets if custom ClientSessionStore implementations log these Debug outputs. The issue is fixed in version 0.23.46. EPSS 0.1%Report on CVE-2026-123609 Vulnerability #rustsec-2026-0346 #crates-io	GCVE Database	2026-10-14

Page 1 of 1