Rustls

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client…CVE-2019-15541Rustls Project · 2.2% likely

   CWE-88

2. Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client inputCVE-2024-32650rustls · CVSS 7.5 · 0.9% likely

   CWE-835

3. rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHelloCVE-2026-123611rustls · CVSS 3.7 · 0.2% likely

   CWE-757

4. rustls before 0.23.46 Denial of Service via Brotli Certificate DecompressionCVE-2026-123610rustls · CVSS 3.7 · 0.2% likely

   CWE-770

5. Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level BypassCVE-2026-123613rustls · CVSS 5.3 · 0.2% likely

   CWE-20

6. rustls 0.23.44 and 0.23.45 ECH Rejection Application Data DisclosureCVE-2026-123612rustls · CVSS 2.3 · 0.1% likely

   CWE-696

7. Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via DebugCVE-2026-123609rustls · CVSS 4 · 0.1% likely

   CWE-212

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.