Skip to content

chore(Cargo.lock): bump rustls-webpki from 0.103.10 to 0.103.12 - #119

Merged
ADD-SP merged 1 commit into
mainfrom
add_sp/bump-rust-webpki
Apr 20, 2026
Merged

ADD-SP merged 1 commit into
mainfrom
add_sp/bump-rust-webpki

Conversation

@ADD-SP

@ADD-SP ADD-SP commented Apr 20, 2026

Copy link
Copy Markdown
Collaborator

Please check the cargo audit output for more details.

Crate:     rustls-webpki
Version:   0.103.10
Title:     Name constraints for URI names were incorrectly accepted
Date:      2026-04-14
ID:        RUSTSEC-2026-0098
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0098
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6
Dependency tree:
rustls-webpki 0.103.10
├── rustls-platform-verifier 0.6.2
│   └── reqwest 0.13.2
│       └── clawshell 0.2.1
└── rustls 0.23.37
    ├── tokio-rustls 0.26.4
    │   ├── reqwest 0.13.2
    │   └── hyper-rustls 0.27.7
    │       └── reqwest 0.13.2
    ├── rustls-platform-verifier 0.6.2
    ├── reqwest 0.13.2
    ├── quinn-proto 0.11.14
    │   └── quinn 0.11.9
    │       └── reqwest 0.13.2
    ├── quinn 0.11.9
    ├── hyper-rustls 0.27.7
    └── clawshell 0.2.1

Crate:     rustls-webpki
Version:   0.103.10
Title:     Name constraints were accepted for certificates asserting a wildcard name
Date:      2026-04-14
ID:        RUSTSEC-2026-0099
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0099
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6

error: 2 vulnerabilities found!

Please check the `cargo audit` output for more details.
```
Crate:     rustls-webpki
Version:   0.103.10
Title:     Name constraints for URI names were incorrectly accepted
Date:      2026-04-14
ID:        RUSTSEC-2026-0098
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0098
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6
Dependency tree:
rustls-webpki 0.103.10
├── rustls-platform-verifier 0.6.2
│   └── reqwest 0.13.2
│       └── clawshell 0.2.1
└── rustls 0.23.37
    ├── tokio-rustls 0.26.4
    │   ├── reqwest 0.13.2
    │   └── hyper-rustls 0.27.7
    │       └── reqwest 0.13.2
    ├── rustls-platform-verifier 0.6.2
    ├── reqwest 0.13.2
    ├── quinn-proto 0.11.14
    │   └── quinn 0.11.9
    │       └── reqwest 0.13.2
    ├── quinn 0.11.9
    ├── hyper-rustls 0.27.7
    └── clawshell 0.2.1

Crate:     rustls-webpki
Version:   0.103.10
Title:     Name constraints were accepted for certificates asserting a wildcard name
Date:      2026-04-14
ID:        RUSTSEC-2026-0099
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0099
Solution:  Upgrade to >=0.103.12, <0.104.0-alpha.1 OR >=0.104.0-alpha.6

error: 2 vulnerabilities found!
```
@ADD-SP
ADD-SP merged commit c563041 into main Apr 20, 2026
4 checks passed
@ADD-SP
ADD-SP deleted the add_sp/bump-rust-webpki branch April 20, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant