Lucene search
+L

1 matches found

osv-rustsec
osv-rustsec
•added 2026/10/14 12:00 p.m.•16 views

RUSTSEC-2026-0346 `Debug` impls for client session values expose TLS secrets

The Debug implementations of Tls12ClientSessionValue and Tls13ClientSessionValue were derived, and so included the TLS 1.2 master secret or TLS 1.3 resumption PSK in their output. Custom ClientSessionStore implementations that format these values with Debug for example, when logging could disclos...

4CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder