cve.nowby Sazabi

crates.ioPackage

webpki-root-certs

1 known vulnerability (1 medium), with the versions each affects and the releases that fix them.

Latest release: 1.0.11 (Oct 23, 2026): no advisory affects it
Newest unaffected release: 1.0.11 (Oct 23, 2026), the latest release
Advisories: 1 · 1 medium

Weekly downloads: 4.8M
Dependents: 2
Releases: 20 since 0.26.4 (Aug 7, 2024)
Registry: crates.io
Releases read: Nov 8, 2026

Version timeline

CVE-2026-111943
Affects 0.26.4 to 0.26.10 (0.26.11 is outside it); 1.0.0 to 1.0.9 (1.0.10 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-111943Medium 6.8
Distrust compromised intermediate certificates in crypto/x509
Affected: fixed in 0.26.11; from 0.26.12-0, fixed in 1.0.10.
Fixed in 0.26.11 (released May 6, 2025, 533 days before disclosure) and 1.0.10 (released Oct 19, 2026, 2 days before disclosure).
The latest release, 1.0.11, is not affected.