Approved changes feed: RSS · Atom

cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRust Openssl Project (f20a5518-a4c6-5373-86e6-8e9f649073c4)
ProductRust Openssl (fda02cad-b38e-546b-b88c-d61ac3e23b3c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rust-openssl purl2cpe 2026-06-01 10:11:49.099839
pkg:deb/ubuntu/rust-openssl purl2cpe 2026-06-01 10:11:49.099841
pkg:github/sfackler/rust-openssl purl2cpe 2026-06-01 10:11:49.099842
pkg:rpm/fedora/rust-openssl purl2cpe 2026-06-01 10:11:49.099844
pkg:rpm/opensuse/rust-openssl purl2cpe 2026-06-01 10:11:49.099846

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20997 vulnerable 2026-06-08 05:11:28.301416 Details available
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Published: 2019-08-26T17:12:03.000Z
Updated: 2024-08-05T12:19:27.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10931 vulnerable 2026-06-08 05:07:25.856324 Details available
An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.
Published: 2019-08-26T12:00:16.000Z
Updated: 2024-08-06T03:38:56.676Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.