How many CVEs have a located fix in openbsd/src?

28 published CVEs have a fix traced to functions in openbsd/src, touching 33 functions across 53 files.

Which function in openbsd/src has been patched by the most CVEs?

steps in lib/libcrypto/x509/x509_verify.c has been changed by 1 CVE fixes, from 2023 to 2023.

How large is a typical CVE fix in openbsd/src?

The median fix changes 18 lines. 54% of fixes change 20 lines or fewer, and 46% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#173 of 500 repositories

openbsd/src

Name: openbsd/src: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 30, 2026

28

CVE fixes located

Published CVEs

33

Functions patched

Distinct function sites

53

Files patched

Distinct source files

2017–2026

Years covered

By CVE publication date

Overview

28 published CVEs have a fix traced to functions in openbsd/src, the earliest published in 2017. Those fixes changed 33 distinct functions across 53 files, in 352 patch hunks.

Among the 500 repositories tracked here, openbsd/src ranks #173 by the number of CVEs with a located fix.

Most patched functions

Functions in openbsd/src changed by the most CVE fixes.

Most patched files

Files in openbsd/src changed by the most CVE fixes.

1lib/libcrypto/x509/x509_verify.c2 CVEs · 1 functions
2sys/netinet/tcp_input.c2 CVEs · 0 functions
3sys/net/pf.c2 CVEs · 0 functions
4usr.bin/ssh/ssh-agent.c2 CVEs · 0 functions
5usr.sbin/httpd/httpd.h1 CVEs · 5 functions
6usr.sbin/ldapd/ldapd.h1 CVEs · 4 functions
7usr.sbin/httpd/server_file.c1 CVEs · 3 functions
8usr.bin/ssh/packet.c1 CVEs · 2 functions
9usr.sbin/ldapd/conn.c1 CVEs · 2 functions
10sbin/slaacd/engine.c1 CVEs · 1 functions

Fix size

How much code a CVE fix in openbsd/src changes, with backports counted once.

18

Median lines changed

Added plus removed, per CVE

54%

Fixes of 20 lines or fewer

Share of CVE fixes

46%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in openbsd/src, and the functions each fix changed.

CVE-2026-103547
CVE-2026-103547auth_res conn ldapd_config
Critical · CVSS 9.2
EPSS 0.4%2026-09-30
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
CVE-2026-56101
Medium · CVSS 6.0
EPSS 0.6%2026-09-08
CVE-2026-57589
CVE-2026-57589refcnt
High · CVSS 7.8
EPSS 0.2%2026-06-25
OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input
CVE-2026-56099
Medium · CVSS 6.9
EPSS 0.5%2026-06-18
CVE-2026-55706
CVE-2026-55706
High · CVSS 8.3
EPSS 0.3%2026-06-17
CVE-2026-41285
CVE-2026-41285in6_addr nd_opt_hdr
Medium · CVSS 4.3
EPSS 0.3%2026-04-20
OpenBSD wg(4) kernel crash
CVE-2025-30334mbuf
High · CVSS 7.1
EPSS 0.4%2025-03-20
OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
CVE-2023-52558
High · CVSS 7.5
EPSS 0.7%2024-03-01
CVE-2023-52557
CVE-2023-52557
High · CVSS 7.5
EPSS 0.6%2024-03-01
OpenBSD 7.4 pf state race condition kernel crash
CVE-2023-52556
Medium · CVSS 6.2
EPSS 0.1%2024-03-01
CVE-2023-40216
CVE-2023-40216
Medium · CVSS 5.5
EPSS 0.1%2023-08-10
CVE-2023-38408
CVE-2023-38408nlist
Critical · CVSS 9.8
EPSS 79.7%2023-07-20

Get an alert for each new openbsd/src CVE, with the patched functions and AI-written analysis.

Monitor src CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf28 CVEs goauthentik/authentik28 CVEs gocd/gocd28 CVEs mautic/mautic28 CVEs pmmp/PocketMine-MP28 CVEs rack/rack28 CVEs squid-cache/squid28 CVEs YesWiki/yeswiki28 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in openbsd/src.

How many CVEs have a located fix in openbsd/src?: 28 published CVEs have a fix traced to functions in openbsd/src, touching 33 functions across 53 files.
Which function in openbsd/src has been patched by the most CVEs?: steps in lib/libcrypto/x509/x509_verify.c has been changed by 1 CVE fixes, from 2023 to 2023.
How large is a typical CVE fix in openbsd/src?: The median fix changes 18 lines. 54% of fixes change 20 lines or fewer, and 46% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track openbsd/src CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing