GHSA-2mjx-qc3c-rqvc: Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
(updated )
Rustls (tested version 0.23.44, and it appears still an issue on latest master though I have not tested this) accepts a TLS 1.3 server flight where a plaintext EncryptedExtensions is packed into the same record as the ServerHello.
This is very similar to Go’s CVE-2025-61730 fixed in https://github.com/golang/go/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
References
- github.com/advisories/GHSA-2mjx-qc3c-rqvc
- github.com/golang/go/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
- github.com/rustls/rustls/commit/98456aea708a7e3c6151e00ca2d4428e7a58257a
- github.com/rustls/rustls/pull/3265
- github.com/rustls/rustls/releases/tag/v/0.23.45
- github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
- rustsec.org/advisories/RUSTSEC-2026-0285.html
Code Behaviors & Features
Detect and mitigate GHSA-2mjx-qc3c-rqvc with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →