Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

aws-lc-sys

4 known vulnerabilities (3 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 high, 1 medium
Weekly downloads
8.7M
Dependents
0
Registry
crates.io

Advisories 4

  • CRL Distribution Point Scope Check Logic Error in AWS-LC

    Affected: from 0.15.0, fixed in 0.39.0.

  • PKCS7_verify Signature Validation Bypass in AWS-LC

    Affected: from 0.24.0, fixed in 0.38.0.

  • CVE-2026-3337Medium 5.9

    Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

    Affected: from 0.14.0, fixed in 0.38.0.

  • PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

    Affected: from 0.24.0, fixed in 0.38.0.