CVE-2026-118372

LibreSSL ocspcheck versions through 4.4.0 are vulnerable to a CRLF injection vulnerability. The issue exists because the url2host() function copies the URI path without rejecting control characters, while http_open() subsequently includes this path in the POST request line. An attacker can exploi...

EUVD-2026-111548

LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by embedding CR/LF sequences in a certificate's AIA OCSP URI path. Because url2host copies the path without rejecting control characters and httpopen places it in the POST request...