| CVE-2026-42327 |
high |
— |
8.0 |
|
|
|
20d ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as Open… |
| CVE-2026-45784 |
medium |
— |
5.5 |
|
|
|
16d ago |
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers |
| CVE-2026-44662 |
medium |
— |
5.5 |
|
|
|
20d ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update incorr… |
| CVE-2025-24898 |
medium |
— |
5.5 |
|
|
|
1y ago |
rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a l… |
| CVE-2023-53159 |
unknown |
— |
— |
|
|
|
3y ago |
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host. |
| CVE-2018-20997 |
unknown |
— |
— |
|
|
|
8y ago |
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing. |
| CVE-2016-10931 |
unknown |
— |
— |
|
|
|
10y ago |
An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for host… |
