An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.Referenceshttps://rustsec.org/advisories/RUSTSEC-2017-0003.html
