1 matches found
RUSTSEC-2026-0346 `Debug` impls for client session values expose TLS secrets
The Debug implementations of Tls12ClientSessionValue and Tls13ClientSessionValue were derived, and so included the TLS 1.2 master secret or TLS 1.3 resumption PSK in their output. Custom ClientSessionStore implementations that format these values with Debug for example, when logging could disclos...
4CVSS5.9AI score
SaveExploits0References3
20