Repository navigation
RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates #592
Description
Bundled root certificates allow trust in distrusted emSign intermediates
| Details | |
|---|---|
| Package | webpki-root-certs |
| Version | 1.0.7 |
| URL | rustls/webpki-roots#133 |
| Date | 2026-10-19 |
| Patched versions | >=1.0.10 |
Affected versions include emSign ECC Root CA - G3, which can allow certificate
paths through distrusted emSign intermediates.
Affected versions may accept certificate paths containing distrusted emSign
intermediate public keys. The private keys corresponding to these intermediates
are now well known.
Version 1.0.10+ removes this root.
See advisory page for additional details.
Activity