Vulnerabilities

RUSTSEC-2023-0044

openssl X509VerifyParamRef::set_host buffer over-read

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte.