RU
Product
rust-openssl
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add rust-openssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42327 | 8.7 | May 14 | rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs Affected: >= 0.9.7, < 0.10.79 |
| CVE-2026-41678 | 8.1 | Apr 24 | rust-openssl: Incorrect bounds assertion in aes key wrap Affected: >= 0.10.24, < 0.10.78 |
| CVE-2026-41681 | 7.5 | Apr 24 | rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check Affected: >= 0.10.39, < 0.10.78 |
| CVE-2026-41676 | 7.5 | Apr 24 | rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 Affected: >= 0.9.27, < 0.10.78 |
| CVE-2026-45784 | 7.1 | Jul 17 | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers Affected: >= 0.10.50, < 0.10.80 |
Showing 5