CVE-2023-53159

LOW 3.3CVE-2023-53159 · Published 28/07/2025 · updated 17/09/2026

In short

CVE-2023-53159 is a LOW (CVSS 3.3) vulnerability affecting openssl (sfackler).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 13.3% of all vulnerabilities.
Fix: update to 0.10.55 or later.

Package	Affected versions	Patched versions
openssl sfackler	`< 0.10.55`	`0.10.55`

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.