https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:13:14 +0000 https://db.gcve.eu/vuln/cve-2026-42327 <p><strong>Affected:</strong> rust-openssl</p> <p>rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate&#39;s AIA extension as OpensslString, whose Deref&lt;Target = str&gt; wraps the raw bytes with str::from_utf8_unchecked. OpenSSL does not enforce that the underlying IA5String is ASCII, so a certificate with non-UTF-8 bytes in its OCSP accessLocation causes safe Rust code to construct a &amp;str that violates the UTF-8 invariant — resulting in undefined behavior. This vulnerability is fixed in 0.10.79.</p> <p><strong>Affected:</strong> rust-openssl</p> <p>rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate&#39;s AIA extension as OpensslString, whose Deref&lt;Target = str&gt; wraps the raw bytes with str::from_utf8_unchecked. OpenSSL does not enforce that the underlying IA5String is ASCII, so a certificate with non-UTF-8 bytes in its OCSP accessLocation causes safe Rust code to construct a &amp;str that violates the UTF-8 invariant — resulting in undefined behavior. This vulnerability is fixed in 0.10.79.</p> https://db.gcve.eu/vuln/cve-2026-42327