tokio-boring
BoringSSL bindings for the Rust programming language.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 50
- Cadence
- ~16 days
- Last 12 months
- 6
Reach
- Downloads
- 2.7M
- Stars
- 514
Details
- License
- MIT OR Apache-2.0
- First release
- Nov 11, 2020
Releases
| Version | Released | |
|---|---|---|
5.2.0
minor
| ||
5.1.0
minor
| ||
4.22.0
unknown
| ||
5.0.0
unknown
| ||
5.0.0-alpha.3
unknown
| ||
5.0.0-alpha.1
unknown
| ||
4.19.0
unknown
| ||
4.18.0
unknown
| ||
4.17.0
unknown
| ||
4.16.0
unknown
| ||
4.15.0
unknown
| ||
4.14.0
unknown
yanked
| ||
4.13.0
unknown
| ||
4.12.0
unknown
| ||
4.11.0
unknown
| ||
4.10.3
unknown
| ||
4.10.2
unknown
| ||
4.10.1
unknown
| ||
4.10.0
unknown
| ||
4.9.1
unknown
| ||
4.9.0
unknown
| ||
4.8.0
unknown
| ||
4.7.0
unknown
| ||
4.6.0
unknown
| ||
4.5.0
unknown
| ||
4.4.1
unknown
| ||
4.4.0
unknown
| ||
4.3.0
unknown
| ||
4.2.0
unknown
| ||
4.1.0
unknown
| ||
4.0.0
unknown
yanked
1 CVE
CVE-2023-6180
GHSA-pjrj-h4fg-6gm4
Dec 05, 2023
tokio-boring vulnerable to resource exhaustion via memory leak
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactThe tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The PatchesThe issue is fixed in version 4.1.0 of tokio-boring. ReferencesAffected versions
4.0.0
Fixed in
4.1.0
References Updated Jul 08, 2026 · Source: OSV.dev | ||
4.0.0-rc.2
unknown
| ||
4.0.0-rc.1
unknown
| ||
3.1.0
unknown
| ||
3.0.4
unknown
| ||
3.0.3
unknown
| ||
3.0.2
unknown
| ||
3.0.1
unknown
| ||
3.0.0
unknown
| ||
2.1.5
unknown
| ||
2.1.4
unknown
| ||
2.1.3
unknown
| ||
2.1.2
unknown
| ||
2.1.1
unknown
| ||
2.1.0
unknown
| ||
2.0.0
unknown
| ||
1.0.3
unknown
| ||
1.0.2
unknown
| ||
1.0.1
unknown
| ||
1.0.0
unknown
|