Vulnerabilities

TI-2026-33521 CVE-2026-45784 · GHSA-phqj-4mhp-q6mq

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

LOW 22

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00134 Published 2026-07-17 Fixed in 0.10.80 CWE-131

TI-2026-32562 CVE-2026-44662 · GHSA-xv59-967r-8726

rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding

LOW 30

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00172 Published 2026-05-14 Fixed in 0.10.79 CWE-122

TI-2026-30633 CVE-2026-42327 · GHSA-xp3w-r5p5-63rr

rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs

MEDIUM 43

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00211 Published 2026-05-14 Fixed in 0.10.79 CWE-20

TI-2026-30300 CVE-2026-41898 · GHSA-hppc-g8h3-xhp3

rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines…

LOW 36

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0028 Published 2026-04-24 Fixed in 0.10.78 CWE-126

TI-2026-30198 CVE-2026-41681 · GHSA-ghm9-cr32-g9qj

rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check

MEDIUM 43

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00359 Published 2026-04-24 Fixed in 0.10.78 CWE-121

TI-2026-30195 CVE-2026-41678 · GHSA-8c75-8mhr-p7r9

rust-openssl: Incorrect bounds assertion in aes key wrap

LOW 33

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.00251 Published 2026-04-24 Fixed in 0.10.78 CWE-787

TI-2026-30194 CVE-2026-41677 · GHSA-xmgf-hq76-4vx2

rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length

LOW 9

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00294 Published 2026-04-24 Fixed in 0.10.78 CWE-125

TI-2026-30193 CVE-2026-41676 · GHSA-pqf5-4pqq-29f5

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

LOW 39

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.00285 Published 2026-04-24 Fixed in 0.10.78 CWE-131

TI-2018-14959 CVE-2018-20997 · GHSA-xjxc-vfw2-cg96

An issue was discovered in the openssl crate before 0.10.9 for Rust.

MEDIUM 46

An issue was discovered in the openssl crate before 0.10.9 for Rust.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01744 Published 2019-08-26 Fixed in 0.10.9 CWE-416

TI-2016-08969 CVE-2016-10931 · GHSA-34p9-f4q3-c4r7

An issue was discovered in the openssl crate before 0.9.0 for Rust.

LOW 37

An issue was discovered in the openssl crate before 0.9.0 for Rust.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00745 Published 2019-08-26 Fixed in 0.9.0 CWE-295

Vulnerabilities

Filters