Browse CVEs

CRITICAL 9.1 CVE-2026-41677 rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validat… Rust Openssl 0.10.78+ Fix from $2,3002026-04-24 HIGH 8.1 CVE-2026-41678 rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion… Rust Openssl 0.10.78+ Fix from $1,9502026-04-24 HIGH 7.5 CVE-2026-41676 rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) se… Rust Openssl 0.10.78+ Fix from $1,9502026-04-24 HIGH 7.5 CVE-2026-41681 rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX… Rust Openssl 0.10.78+ Fix from $1,9502026-04-24 MEDIUM 5.3 CVE-2026-41898 rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilde… Rust Openssl 0.10.78+ Fix from $1,6002026-04-24 CRITICAL 9.8 CVE-2018-20997 An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing. Rust Openssl 0.10.9+ Fix from $2,3002019-08-26 HIGH 8.1 CVE-2016-10931 An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verificat… Rust Openssl 0.9.0+ Fix from $1,9502019-08-26