https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 20:34:47 +0000 https://db.gcve.eu/vuln/cleanstart-2026-qq62108 <p><strong>Affected:</strong> CleanStart: rustup</p> <p>Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: rustup</p> <p>Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details.</p> https://db.gcve.eu/vuln/cleanstart-2026-qq62108 https://db.gcve.eu/vuln/rustsec-2026-0346 <p><strong>Affected:</strong> crates.io: rustls</p> <p>The `Debug` implementations of `Tls12ClientSessionValue` and `Tls13ClientSessionValue` were derived, and so included the TLS 1.2 master secret or TLS 1.3 resumption PSK in their output.</p> <p>Custom `ClientSessionStore` implementations that format these values with `Debug` (for example, when logging) could disclose these secrets to readers of the logs. This conflicts with rustls&#39;s [key-material redaction policy](https://github.com/rustls/rustls/blob/99f2358cae2954837dbb866faf6727de75489ab9/SECURITY.md#boundary-public-api).</p> <p>Ordinary connection and built-in session cache `Debug` output is redacted and is not affected.</p> <p><strong>Affected:</strong> crates.io: rustls</p> <p>The `Debug` implementations of `Tls12ClientSessionValue` and `Tls13ClientSessionValue` were derived, and so included the TLS 1.2 master secret or TLS 1.3 resumption PSK in their output.</p> <p>Custom `ClientSessionStore` implementations that format these values with `Debug` (for example, when logging) could disclose these secrets to readers of the logs. This conflicts with rustls&#39;s [key-material redaction policy](https://github.com/rustls/rustls/blob/99f2358cae2954837dbb866faf6727de75489ab9/SECURITY.md#boundary-public-api).</p> <p>Ordinary connection and built-in session cache `Debug` output is redacted and is not affected.</p> https://db.gcve.eu/vuln/rustsec-2026-0346