{"items":[{"id":"CVE-2026-93602","published":"2026-09-18T13:20:12.259Z","updated":"2026-09-18T17:58:12.511Z","title":"rustls-webpki before 0.103.10 CRL Revocation Check Bypass","severity":"MEDIUM","score":5.9,"vendor":"rustls","product":"webpki","kev":false,"epss":0.002,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93601","published":"2026-09-18T13:20:11.571Z","updated":"2026-09-18T17:49:52.199Z","title":"rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass","severity":"LOW","score":2.1,"vendor":"rustls","product":"webpki","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93600","published":"2026-09-18T13:20:10.899Z","updated":"2026-09-21T20:51:59.078Z","title":"rustls webpki Name Constraints URI Validation Bypass","severity":"LOW","score":2.1,"vendor":"rustls","product":"webpki","kev":false,"epss":0.00203,"kevAdded":null,"exploit":false},{"id":"CVE-2026-93599","published":"2026-09-18T13:20:10.258Z","updated":"2026-09-18T14:15:25.188Z","title":"rustls-webpki before 0.103.13 Panic via empty BIT STRING","severity":"HIGH","score":8.7,"vendor":"rustls","product":"webpki","kev":false,"epss":0.00346,"kevAdded":null,"exploit":true},{"id":"CVE-2024-32650","published":"2024-04-19T16:05:44.050Z","updated":"2024-08-02T02:13:40.195Z","title":"Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input","severity":"HIGH","score":7.5,"vendor":"rustls","product":"rustls","kev":false,"epss":0.00949,"kevAdded":null,"exploit":false}]}