Skip to content

chore(Cargo.lock): bump rust-webpki from 0.103.12 to 0.103.13 - #125

Merged
ADD-SP merged 2 commits into
mainfrom
add_sp/bump-rust-webpki
Apr 25, 2026
Merged

ADD-SP merged 2 commits into
mainfrom
add_sp/bump-rust-webpki

Conversation

@ADD-SP

@ADD-SP ADD-SP commented Apr 25, 2026

Copy link
Copy Markdown
Collaborator
Crate:     rustls-webpki
Version:   0.103.12
Title:     Reachable panic in certificate revocation list parsing
Date:      2026-04-22
ID:        RUSTSEC-2026-0104
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0104
Solution:  Upgrade to >=0.103.13, <0.104.0-alpha.1 OR >=0.104.0-alpha.7
Dependency tree:
rustls-webpki 0.103.12
├── rustls-platform-verifier 0.6.2
│   └── reqwest 0.13.2
│       └── clawshell 0.2.1
└── rustls 0.23.37
    ├── tokio-rustls 0.26.4
    │   ├── reqwest 0.13.2
    │   └── hyper-rustls 0.27.7
    │       └── reqwest 0.13.2
    ├── rustls-platform-verifier 0.6.2
    ├── reqwest 0.13.2
    ├── quinn-proto 0.11.14
    │   └── quinn 0.11.9
    │       └── reqwest 0.13.2
    ├── quinn 0.11.9
    ├── hyper-rustls 0.27.7
    └── clawshell 0.2.1

error: 1 vulnerability found!

```
Crate:     rustls-webpki
Version:   0.103.12
Title:     Reachable panic in certificate revocation list parsing
Date:      2026-04-22
ID:        RUSTSEC-2026-0104
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0104
Solution:  Upgrade to >=0.103.13, <0.104.0-alpha.1 OR >=0.104.0-alpha.7
Dependency tree:
rustls-webpki 0.103.12
├── rustls-platform-verifier 0.6.2
│   └── reqwest 0.13.2
│       └── clawshell 0.2.1
└── rustls 0.23.37
    ├── tokio-rustls 0.26.4
    │   ├── reqwest 0.13.2
    │   └── hyper-rustls 0.27.7
    │       └── reqwest 0.13.2
    ├── rustls-platform-verifier 0.6.2
    ├── reqwest 0.13.2
    ├── quinn-proto 0.11.14
    │   └── quinn 0.11.9
    │       └── reqwest 0.13.2
    ├── quinn 0.11.9
    ├── hyper-rustls 0.27.7
    └── clawshell 0.2.1

error: 1 vulnerability found!
```
@ADD-SP
ADD-SP enabled auto-merge April 25, 2026 17:23
@ADD-SP
ADD-SP disabled auto-merge April 25, 2026 17:39
@ADD-SP
ADD-SP merged commit 9e70e9b into main Apr 25, 2026
4 checks passed
@ADD-SP
ADD-SP deleted the add_sp/bump-rust-webpki branch April 25, 2026 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant