Problem
cargo audit reports 8 advisories, 3 at HIGH severity:
| Crate |
Version |
Issue |
Severity |
| aws-lc-sys |
0.37.1 |
PKCS7 signature bypass |
HIGH |
| aws-lc-sys |
0.37.1 |
CRL bypass |
HIGH |
| aws-lc-sys |
0.37.1 |
3 additional advisories |
MEDIUM |
| quinn-proto |
|
DoS vulnerability (CVSS 8.7) |
HIGH |
| time |
|
Stack exhaustion |
MEDIUM |
| rustls-webpki |
|
CRL matching issue |
MEDIUM |
Suggested Fix
cargo update to pull latest compatible versions
- Bump
aws-lc-sys to >= 0.39.0 (may require updating aws-sdk-* crates)
- Verify
quinn-proto update resolves the DoS advisory
- Run
cargo audit to confirm zero HIGH advisories remain
Source
Security audit, 2026-03-23.
Problem
cargo auditreports 8 advisories, 3 at HIGH severity:Suggested Fix
cargo updateto pull latest compatible versionsaws-lc-systo >= 0.39.0 (may require updatingaws-sdk-*crates)quinn-protoupdate resolves the DoS advisorycargo auditto confirm zero HIGH advisories remainSource
Security audit, 2026-03-23.