Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Rust Openssl CRITICAL 9.1
CVE-2026-41677

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validat…

Fix: 0.10.78+
Fix from $2,300 2026-04-24
Rust Openssl HIGH 8.1
CVE-2026-41678

rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion…

Fix: 0.10.78+
Fix from $1,950 2026-04-24
Rust Openssl HIGH 7.5
CVE-2026-41676

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) se…

Fix: 0.10.78+
Fix from $1,950 2026-04-24
Rust Openssl HIGH 7.5
CVE-2026-41681

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX…

Fix: 0.10.78+
Fix from $1,950 2026-04-24
Rust Openssl MEDIUM 5.3
CVE-2026-41898

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilde…

Fix: 0.10.78+
Fix from $1,600 2026-04-24
Rust Openssl CRITICAL 9.8
CVE-2018-20997

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.

Fix: 0.10.9+
Fix from $2,300 2019-08-26
Rust Openssl HIGH 8.1
CVE-2016-10931

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verificat…

Fix: 0.9.0+
Fix from $1,950 2019-08-26