pkg:crates.io/openssl

All known vulnerabilities

• CRITICAL9.8CVE-2018-20997Use after free in CMS Signing
  >= 0.10.8, < 0.10.9
• CRITICAL9.8CVE-2018-20997Use after free in CMS Signing
  >= 0.10.8, < 0.10.9
• CRITICAL9.1CVE-2026-41677rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length
  >= 0.9.0, < 0.10.78
• HIGH8.1SSL/TLS MitM vulnerability due to insecure defaults
  from 0, < 0.9.0
• HIGH8.1SSL/TLS MitM vulnerability due to insecure defaults
  >= 0.0.0-0, < 0.9.0
• MEDIUM4.5`openssl` `X509VerifyParamRef::set_host` buffer over-read
  >= 0.10.0, < 0.10.55
• MEDIUM4.5`openssl` `X509VerifyParamRef::set_host` buffer over-read
  >= 0.0.0-0, < 0.10.55
• —rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding
  >= 0.10.0, < 0.10.79
• —rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
  >= 0.9.7, < 0.10.79
• —rust-openssl - security update
  >= 0.10.0, < 0.10.70
• —rust-openssl - security update
  >= 0.0.0-0, < 0.10.70