Vulnerabilities

TI-2026-33521 CVE-2026-45784 · GHSA-phqj-4mhp-q6mq

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

LOW 22

rust-openssl provides OpenSSL bindings for the Rust programming language.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00134 Published 2026-07-17 Fixed in 0.10.80 CWE-131

TI-2023-29455 CVE-2023-53159 · GHSA-xcf7-rvmh-g6q4

LOW 20

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

CVSS 3.1MEDIUM 4.5 Local No auth No interaction EPSS 0.00226 Published 2025-07-28 Partial fix · 0.10.55 CWE-126

TI-2025-18600 CVE-2025-24898 · GHSA-rpmj-rpgj-qmpm

LOW 29

rust-openssl is a set of OpenSSL bindings for the Rust programming language.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0068 Published 2025-02-03 Partial fix · 0.10.70 CWE-416