diff --git a/CHANGELOG.md b/CHANGELOG.md
index 016a5519..9da18865 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -717,6 +717,20 @@ for historical reference.
   was reported at 7 — a finding the CLI never emits — and
   closure-heavy code drew spurious SARIF findings.
 
+### Security
+
+- Cleared RUSTSEC-2026-0285 by moving `rustls` `0.23.43` → `0.23.45` in
+  the workspace lockfile. Rustls accepted TLS 1.3 handshake messages
+  sent at the wrong encryption level when they followed a key-changing
+  message in the same record — for example a plaintext
+  `EncryptedExtensions` packed into the `ServerHello` record — where
+  RFC 8446 §5.1 requires the connection be terminated with an
+  `unexpected_message` alert. The handshake transcript stays
+  authenticated, so a network-position attacker cannot alter or
+  complete a handshake. `rustls` is a dev-only transitive dependency
+  here (`jsonschema` → `reqwest`), reached by no shipped code path;
+  the bump keeps the `cargo-deny` advisories gate green.
+
 ## [2.2.0] - 2026-08-29
 
 One entry below is marked **(breaking)**: the Python bindings'
diff --git a/Cargo.lock b/Cargo.lock
index 62baace5..e309c9df 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3691,9 +3691,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.43"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
  "aws-lc-rs",
  "once_cell",