RU
Product
rust-openssl
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add rust-openssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41677 | 9.1 | Apr 24 | rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length Affected: >= 0.9.0, < 0.10.78 |
| CVE-2026-42327 | 8.7 | May 14 | rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs Affected: >= 0.9.7, < 0.10.79 |
| CVE-2026-41678 | 8.1 | Apr 24 | rust-openssl: Incorrect bounds assertion in aes key wrap Affected: >= 0.10.24, < 0.10.78 |
| CVE-2026-41681 | 7.5 | Apr 24 | rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check Affected: >= 0.10.39, < 0.10.78 |
| CVE-2026-41676 | 7.5 | Apr 24 | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 Affected: >= 0.9.27, < 0.10.78 |
| CVE-2026-45784 | 7.1 | Jul 17 | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers Affected: >= 0.10.50, < 0.10.80 |
| CVE-2026-41898 | 5.3 | Apr 24 | rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer Affected: >= 0.9.24, < 0.10.78 |
| CVE-2026-44662 | 5.1 | May 14 | rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding Affected: >= 0.10.0, < 0.10.79 |
Showing 8