rust-openssl vulnerabilities and fixes

Recent CVEs affecting rust-openssl, with upgrade or downgrade steps. 5 tracked.

Also searched as: rust openssl.

rust-openssl has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-04-24. Highest priority: CVE-2026-41677 (score 47/100).

• CVE-2026-41678 HIGH 8.1 UPGRADE rust-openssl provides OpenSSL bindings for the Rust programming language
• CVE-2026-41681 HIGH 7.5 UPGRADE rust-openssl provides OpenSSL bindings for the Rust programming language
• CVE-2026-41676 HIGH 7.5 UPGRADE rust-openssl provides OpenSSL bindings for the Rust programming language
• CVE-2026-41898 MEDIUM 5.3 UPGRADE rust-openssl provides OpenSSL bindings for the Rust programming language
• CVE-2026-41677 CRITICAL 9.1 UPGRADE rust-openssl provides OpenSSL bindings for the Rust programming language

FAQ

How do I fix rust-openssl vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rust-openssl being exploited right now?

None of the tracked rust-openssl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rust-openssl CVE should I patch first?

CVE-2026-41677 currently ranks highest (47/100): rust-openssl provides OpenSSL bindings for the Rust programming language.

RSS feed for rust-openssl · ← Back to latest CVEs