Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-123613 · CVE overview and exploitation status

EUVD-2026-119372

GHSA-rp7q-jxfg-4g6g

GHSA-2mjx-qc3c-rqvc

RUSTSEC-2026-0285

cve-program · CVE-2026-123613

• https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
• https://github.com/rustls/rustls/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
• https://www.vulncheck.com/advisories/rustls-0.23.13-before-0.23.45-tls-1.3-handshake-encryption-level-bypass

euvd · EUVD-2026-119372

• https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
• https://github.com/rustls/rustls/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
• https://www.vulncheck.com/advisories/rustls-0.23.13-before-0.23.45-tls-1.3-handshake-encryption-level-bypass

nvd · CVE-2026-123613

• https://github.com/rustls/rustls/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
• https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
• https://www.vulncheck.com/advisories/rustls-0.23.13-before-0.23.45-tls-1.3-handshake-encryption-level-bypass

osv · GHSA-2mjx-qc3c-rqvc

• https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
• https://github.com/rustls/rustls/pull/3265
• https://github.com/golang/go/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
• https://github.com/rustls/rustls/commit/98456aea708a7e3c6151e00ca2d4428e7a58257a
• https://github.com/rustls/rustls
• https://github.com/rustls/rustls/releases/tag/v/0.23.45
• https://rustsec.org/advisories/RUSTSEC-2026-0285.html

osv · RUSTSEC-2026-0285

• https://crates.io/crates/rustls
• https://rustsec.org/advisories/RUSTSEC-2026-0285.html
• https://github.com/rustls/rustls/pull/3265

• Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record, because Deframer::aligned does not enforce RFC 8446 record-boundary alignment. A… · Advisory content revised · 14 Nov 2026
• Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record, because Deframer::aligned does not enforce RFC 8446 record-boundary alignment. A… · Advisory content revised · 14 Nov 2026
• Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record, because Deframer::aligned does not enforce RFC 8446 record-boundary alignment. A… · Advisory content revised · 12 Nov 2026
• Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass · Newly collected advisory · 8 Nov 2026
• Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries · Advisory content revised · 8 Nov 2026
• TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries · Advisory content revised · 8 Nov 2026