Executive brief
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Affected products
- crates.io aws-lc-sys
Junglewise Threat Intelligence
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Severity: medium · CVSS 4 · Published 2026-03-20
Technologies: aws-lc-sys (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2026-0044 - AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
- RUSTSEC-2026-0048 - CRL Distribution Point Scope Check Logic Error in AWS-LC
- AWS AWS-LC signature verification bypass in PKCS7_verify
- AWS AWS-LC certificate chain validation bypass in PKCS7_verify
- RUSTSEC-2026-0043 - Timing Side-Channel in AES-CCM Tag Verification in AWS-LC