Junglewise Threat Intelligence

RUSTSEC-2026-0285 - TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Severity: low · CVSS 3.1 · Published 2026-09-14

Technologies: rustls (crates.io). Vendors: crates.io.

Executive brief

TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Affected products

crates.io rustls

Related threats

RUSTSEC-2024-0399 - rustls network-reachable panic in `Acceptor::accept`
RUSTSEC-2024-0336 - `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input