The OpenSSL project has created a web page that lists the CVEs since the release of OpenSSL 3.0.0 and the impact on the FIPS provider. Feel free to have a look: https://www.openssl.org/news/fips-cve.html Regards, Dr Paul Dale