EUVD-2026-119371

rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the client-facing server when Encrypted Client Hello is rejected. Because starttraffic queues plaintext from ClientConnection::writer before sending th...

CVE-2026-123612

The rustls library versions 0.23.44 and 0.23.45 are vulnerable to an information disclosure vulnerability during an Encrypted Client Hello (ECH) rejection. The root cause is that the start_traffic() function queues plaintext data from ClientConnection::writer() before the ech_required alert is se...

CVE-2026-123612 rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure

rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the client-facing server when Encrypted Client Hello is rejected. Because starttraffic queues plaintext from ClientConnection::writer before sending th...

CVE-2026-123612: rustls: rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before…

rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the client-facing server when Encrypted Client Hello is rejected. Because starttraffic queues plaintext from ClientConnection::writer before sending th...

PT-2026-139893

rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the client-facing server when Encrypted Client Hello is rejected. Because start traffic queues plaintext from ClientConnection::writer before sending t...

GHSA-VP88-798V-H67F rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

In rustls 0.23.44 and 0.23.45, application data that a client buffers before the handshake completes is sent to the server even when the server rejects Encrypted Client Hello ECH. When the server rejects ECH, the client completes the handshake with the outer ClientHello and authenticates the serv...

RUSTSEC-2026-0347 Buffered application data sent to outer server after ECH rejection

When a server rejects Encrypted Client Hello ECH, the client completes the handshake using the outer ClientHello and authenticates the server against the ECH config's publicname. At the end of that handshake, rustls encrypted and queued any application data buffered via ClientConnection::writer...

Buffered application data sent to outer server after ECH rejection

When a server rejects Encrypted Client Hello ECH, the client completes the handshake using the outer ClientHello and authenticates the server against the ECH config's publicname. At the end of that handshake, rustls encrypted and queued any application data buffered via ClientConnection::writer...