Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
cargo openssl-src Security Advisories
Loading...
Moderate
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: about 1 year ago
GSA_kwCzR0hTQS1wNTJnLWNtNWotbWp2NM4AAxfu
openssl-src subject to Timing Oracle in RSA DecryptionEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: about 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
GSA_kwCzR0hTQS1yN2p3LXdwNjgtM3hjaM4AAxft
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
Critical
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 32.4
Published: about 1 year ago
GSA_kwCzR0hTQS13Njd3LW13NGotOHFyds4AAxfs
openssl-src contains Read Buffer Overflow in X.509 Name ConstraintEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 32.4
Published: about 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
GSA_kwCzR0hTQS0yOXh4LWhjdjItYzRjcM4AAxfr
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functionsEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
GSA_kwCzR0hTQS12NXc2LXdjbTgtam00cc4AAxfq
openssl-src contains Double free after calling `PEM_read_bio_ex`Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
GSA_kwCzR0hTQS12eHJoLWNwZzctOHZqcs4AAxfp
openssl-src subject to NULL dereference validating DSA public keyEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
GSA_kwCzR0hTQS12cmg3LXg2NHYtN3Z4cc4AAxfo
openssl-src contains `NULL` dereference during PKCS7 data verificationEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 1 year ago
High
Ecosystems: cargo, pypi
Packages: openssl-src, cryptography
Source: GitHub Advisory Database
Blast Radius: 64.2
Published: about 1 year ago
GSA_kwCzR0hTQS14NHFyLTJmdmYtM21yNc4AAxfn
Vulnerable OpenSSL included in cryptography wheelsEcosystems: cargo, pypi
Packages: openssl-src, cryptography
Source: GitHub Advisory Database
Blast Radius: 64.2
Published: about 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 1 year ago
GSA_kwCzR0hTQS12cjhqLWhnbW0tamg5cs4AAwTC
openssl-src subject to DoS by double-checked lockingEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 1 year ago
Critical
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: over 1 year ago
GSA_kwCzR0hTQS04cndyLXgzN3AtbXgyM84AAvn2
X.509 Email Address 4-byte Buffer OverflowEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: over 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 1 year ago
GSA_kwCzR0hTQS1oOGptLTJ4NTMteGhwNc4AAvn1
X.509 Email Address Variable Length Buffer OverflowEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 1 year ago
GSA_kwCzR0hTQS00ZjYzLTg5dzktM2pqds4AAvPY
Using a Custom Cipher with `NID_undef` may lead to NULL encryptionEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 1 year ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: almost 2 years ago
GSA_kwCzR0hTQS0zd3g3LTQ2Y2gtN3JxMs4AAtH0
AES OCB fails to encrypt some bytesEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: almost 2 years ago
Critical
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: almost 2 years ago
GSA_kwCzR0hTQS03MzVmLXBnNzYtZnhjNM4AAtFu
openssl-src heap memory corruption with RSA private key operationEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: almost 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.3
Published: almost 2 years ago
GSA_kwCzR0hTQS1xOXdqLWY0cXctNnZmas4AApp0
Read buffer overruns processing ASN.1 stringsEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.3
Published: almost 2 years ago
Critical
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: almost 2 years ago
GSA_kwCzR0hTQS01d3c2LXB4NDItd2M4Nc4AApqI
SM2 Decryption Buffer OverflowEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 34.9
Published: almost 2 years ago
Moderate
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 18.8
Published: almost 2 years ago
GSA_kwCzR0hTQS1tZm02LXI5ZzItcTRyN83dTg
`OCSP_basic_verify` may incorrectly verify the response signing certificateEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 18.8
Published: almost 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: almost 2 years ago
GSA_kwCzR0hTQS1nMzIzLWZyOTMtNGozY83dRw
Resource leakage when decoding certificates and keysEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: almost 2 years ago
Moderate
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: almost 2 years ago
GSA_kwCzR0hTQS02MzhtLW04bWgtN2d3Ms3dRQ
Incorrect MAC key used in the RC4-MD5 ciphersuiteEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: almost 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 2 years ago
GSA_kwCzR0hTQS14M21oLWp2anctM3h3eM0zKw
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificatesEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: about 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 2 years ago
GSA_kwCzR0hTQS1tbWpmLWY1anctdzcycc0bZA
Invalid handling of `X509_verify_cert()` internal errors in libsslEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 2 years ago
Moderate
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: over 2 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTgzbXgtNTczeC01cnc5
openssl-src NULL pointer Dereference in signature_algorithms processingEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: over 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.3
Published: over 2 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThoZmoteHJqMi1wbTIy
Certificate check bypass in openssl-srcEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.3
Published: over 2 years ago
Moderate
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: over 2 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg0cm0tcWYzNy1mZ2My
Integer Overflow in openssl-srcEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 21.0
Published: over 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 2 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFnbTYtOTQ3Mi1wd3E3
Integer Overflow in openssl-srcEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 2 years ago
High
Ecosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 2 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpxNjUtMjl2NC00eDM1
Null pointer deference in openssl-srcEcosystems: cargo
Packages: openssl-src
Source: GitHub Advisory Database
Blast Radius: 26.7
Published: over 2 years ago
Statistics
Advisories: 18,151
Packages: 8,242
Repositories: 6
Ecosystems: 12
Packages: 8,242
Repositories: 6
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
openssl-src
26
ckb
22
wasmtime
16
rusqlite
16
deno
11
surrealdb
8
openssl
7
libpulse-binding
7
hyper
7
sized-chunks
6
Simple-Wayland-HotKey-Daemon
6
smallvec
6
cranelift-codegen
6
xcb
5
cargo
5
messagepack-rs
5
frontier
5
lock_api
5
comrak
5
bottlerocket/update-operator
5
tauri
4
raw-cpuid
4
tremor-script
4
pleaser
4
evm
4
deno_runtime
4
tokio
4
actix-web
4
slice-deque
3
nanorand
3
h2
3
arr
3
id-map
3
ammonia
3
grin
3
apache-avro
3
flatbuffers
3
fltk
3
crossbeam
3
s2n-quic
3
routinator
3
anoncreds-clsignatures
3
ursa
3
crossbeam-channel
3
arrow
3
solana_rbpf
3
acc_reader
3
cgc
3
apollo-router
3
quiche
3
tough
3
bronzedb-protocol
2
buffoon
2
rulex
2
lru
2
futures-util
2
gfx-auxil
2
ash
2
bite
2
ozone
2
binjs_io
2
http
2
columnar
2
flumedb
2
mopa
2
traitobject
2
stack_dst
2
simple_asn1
2
trust-dns-server
2
futures-task
2
internment
2
v9
2
signal-simple
2
tiny_future
2
pnet
2
vec-const
2
simple-slab
2
pywasm3
2
wasm3
2
hyper-staticfile
2
tectonic_xdv
2
metrics-util
2
spin
2
ordnung
2
reorder
2
rocket
2
libgit2-sys
2
multiqueue
2
vm-memory
2
Deno
2
crayon
2
cache
2
image
2
ncurses
2
zerocopy
2
rand_core
2
toodee
2
slock
2
evm-core
2
libp2p-core
2
csv-sniffer
2
opcua
2
ticketed_lock
2
russh
2
gix-transport
2
rsa
2
rdiff
2
rust-embed
2
failure
2
streebog
2
bumpalo
2
arenavec
2
parc
2
derive-com-impl
2
abi_stable
2
memoffset
2
slack-morphism
2
svix
2
net2
2
libsecp256k1
2
generator
2
tower-http
2
nix
2
async-h1
2
molecule
2
crypto2
2
mio
2
oqs
2
coreos-installer
2
abomonation
2
sha2
2
sodiumoxide
2
tar
2
ntpd
2
array-macro
2
actix-http
2
lettre
2
syncpool
2
inventory
2
iced-x86
1
magick.net-q16-x64
1
magick.net-q16-hdri-anycpu
1
magick.net-q16-anycpu
1
webp
1
bam
1
Pillow
1
diesel
1
github.com/chai2010/webp
1
SkiaSharp
1
electron
1
libwebp-sys
1
libwebp-sys2
1
actix-utils
1
tiny_http
1
byte_struct
1
cocoon
1
security-framework
1
num-bigint
1
linked-hash-map
1
portaudio-rs
1
telemetry
1
av-data
1
calamine
1
pqc_kyber
1
late-static
1
stackvector
1
containers
1
better-macro
1
noise_search
1
model
1
pancurses
1
beef
1
async-coap
1
bigint
1
try-mutex
1
serde_v8
1
atom
1
magick.net-q8-x64
1
magick.net-q8-openmp-x64
1
serde_cbor
1
rmp-serde
1
aliyundrive-webdav
1
yaml-rust
1
vmm-sys-util
1
libdav1d-sys
1
transpose
1
whoami
1
wasmi
1
lzf
1
snow
1
mdBook
1
trillium-client
1
trillium-http
1
mail-internals
1
rustls-webpki
1
portaudio
1
aliyundrive-webdav
1
matrix-sdk
1
cassandra-cpp
1
tauri-cli
1