Commit fc07f08
committed
fix(deps): atualiza rustls para 0.23.45 (RUSTSEC-2026-0285)
O cargo audit apontava uma vulnerabilidade media (CVSS 5.3) em rustls
0.23.40, dependencia transitiva via reqwest: mensagens de handshake
TLS 1.3 eram aceitas atravessando limites de nivel de criptografia.
Corrigida em 0.23.45.
Na mesma atualizacao:
- chacha20 0.10.1 -> 0.10.2, saindo de uma versao yanked.
- rustls-webpki 0.103.13 -> 0.103.15, arrastado pelo rustls.
Sao mudancas so de Cargo.lock; nenhum requisito do Cargo.toml muda.1 parent 2e7baad commit fc07f08
1 file changed
Lines changed: 6 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments