CVE-2026-123613

The Rustls library versions 0.23.13 through 0.23.44 are vulnerable to a TLS 1.3 Handshake Encryption Level Bypass . The root cause is that the Deframer::aligned component fails to enforce RFC 8446 record-boundary alignment . This allow a peer or on-path attacker to pack a plaintext EncryptedExten...