Junkurihara Httpsig-rs vulnerabilities

• junkurihara httpsig-hyper, httpsig-rs +1 more httpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass CVE-2026-26275 Fix available 7.5 HighFebruary 17, 2026
• junkurihara httpsig-rs httpsig-rs's HMAC verification is vulnerable to timing attack CVE-2025-59058 Fix available 5.9 MediumSeptember 12, 2025