| CVE-2026-41898 |
critical |
9.8 |
9.8 |
|
|
|
1mo ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callbac… |
| CVE-2026-41681 |
critical |
9.8 |
9.8 |
|
|
|
1mo ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller th… |
| CVE-2026-41678 |
critical |
9.8 |
9.8 |
|
|
|
1mo ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks that out.len() + 8 <= in_.len(), but t… |
| CVE-2026-41676 |
critical |
9.8 |
9.8 |
|
|
|
1mo ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out len… |
| CVE-2026-41677 |
critical |
9.1 |
9.1 |
|
|
|
1mo ago |
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A pa… |
| CVE-2026-42327 |
high |
— |
8.0 |
|
|
|
14d ago |
rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs |
| CVE-2026-45784 |
medium |
— |
5.5 |
|
|
|
9d ago |
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers |
| CVE-2026-44662 |
medium |
— |
5.5 |
|
|
|
14d ago |
rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding |
| CVE-2025-24898 |
medium |
— |
5.5 |
|
|
|
1y ago |
Moderate: python3.12-cryptography security update |