aws-lc-sys (crates.io)
Advisories
10
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.39.0 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p aws-lc-sys --precise 0.39.0Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-9f94-5g5w-gf6r CRL Distribution Point Scope Check Logic Error in AWS-LC |
Critical EPSS 0.26% |
>= 0.15.0, < 0.39.0 | 0.39.0 |
| GHSA-9f94-5g5w-gf6r CRL Distribution Point Scope Check Logic Error in AWS-LC |
Critical EPSS 0.26% |
>= 0.15.0, < 0.39.0 | 0.39.0 |
| GHSA-394x-vwmw-crm3 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN |
High | >= 0.32.0, < 0.39.0 | 0.39.0 |
| GHSA-394x-vwmw-crm3 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN |
High | >= 0.32.0, < 0.39.0 | 0.39.0 |
| GHSA-vw5v-4f2q-w9xf AWS-LC has PKCS7_verify Certificate Chain Validation Bypass |
High EPSS 0.74% |
>= 0.24.0, < 0.38.0 | 0.38.0 |
| GHSA-65p9-r9h6-22vj AWS-LC has Timing Side-Channel in AES-CCM Tag Verification |
Medium EPSS 1.08% |
>= 0.14.0, < 0.38.0 | 0.38.0 |
| GHSA-vw5v-4f2q-w9xf AWS-LC has PKCS7_verify Certificate Chain Validation Bypass |
High EPSS 0.74% |
>= 0.24.0, < 0.38.0 | 0.38.0 |
| GHSA-65p9-r9h6-22vj AWS-LC has Timing Side-Channel in AES-CCM Tag Verification |
Medium EPSS 1.08% |
>= 0.14.0, < 0.38.0 | 0.38.0 |
| GHSA-hfpc-8r3f-gw53 AWS-LC has PKCS7_verify Signature Validation Bypass |
High EPSS 0.78% |
>= 0.24.0, < 0.38.0 | 0.38.0 |
| GHSA-hfpc-8r3f-gw53 AWS-LC has PKCS7_verify Signature Validation Bypass |
High EPSS 0.78% |
>= 0.24.0, < 0.38.0 | 0.38.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor