Rust-openssl - vulnerabilities (CVEs)
8 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-17.
Products
- Rust-openssl - 8 CVEs
Newest CVEs of Rust-openssl
- CVE-2026-45784 - CVSS 7.1 (high), 2026-07-17: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in…
- CVE-2026-44662 - CVSS 5.1 (medium), 2026-05-14: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipher_update,…
- CVE-2026-42327 - CVSS 8.7 (high), 2026-05-14: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs…
- CVE-2026-41678 - CVSS 8.1 (high), 2026-04-24: rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks…
- CVE-2026-41677 - CVSS 9.1 (critical), 2026-04-24: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the…
- CVE-2026-41898 - CVSS 8.3 (high), 2026-04-24: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind…
- CVE-2026-41676 - CVSS 7.5 (high), 2026-04-24: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len =…
- CVE-2026-41681 - CVSS 8.1 (high), 2026-04-24: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx)…
