Issues

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  dfallman/texttv#22 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  dfallman/texttv#21 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  dfallman/texttv#19 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  dfallman/texttv#18 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  dfallman/texttv#16 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  dfallman/texttv#17 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2024-0449: unsafe-libyaml is unmaintained

  dfallman/texttv#14 · Filter by author github-actions opened on Oct 12, 2026