CVE-2026-71443: Der Generalized Time From System Time Unwrap

Calling `.unwrap()` or `.expect()` on `GeneralizedTime::from_system_time` or `UtcTime::from_system_time` can cause an unhandled panic and denial-of-service if the timestamp falls outside the ASN.1 supported range (e.g., 1970-9999). Propagate or handle the `Result` instead.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0Rust
greprules fetch cve-2026-71443-der-generalized-time-from-system-time-unwrap --engine opengrep

Description

Calling `.unwrap()` or `.expect()` on `GeneralizedTime::from_system_time` or `UtcTime::from_system_time` can cause an unhandled panic and denial-of-service if the timestamp falls outside the ASN.1 supported range (e.g., 1970-9999). Propagate or handle the `Result` instead.