Rust-Openssl

8 CVEs across 1 Rust-Openssl products. Browse Rust-Openssl vulnerabilities, severities, and proof-of-concept exploits.

Rust-Openssl products with known CVEs

ProductCVEs
Rust-Openssl8
Rust-Openssl CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45784High7.12026-07-17rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher…
CVE-2026-446622026-05-14rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipher_update, CipherCtxRef::cipher_upda…
CVE-2026-423272026-05-14rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs fr…
CVE-2026-41898Medium5.32026-04-24rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk…
CVE-2026-41681High7.52026-04-24rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx)…
CVE-2026-41678High8.12026-04-24rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it check…
CVE-2026-41677Critical9.12026-04-24rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the leng…
CVE-2026-41676High7.52026-04-24rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = b…