Eclipse KeyPont input validation error vulnerability

Versions 2.0.0-rc3 through 2.0.0-rc8 of Eclipse KeyPont contain an input validation error vulnerability. This vulnerability arises because the ML-KEM key pair lookup function locates public keys via CKAID and CKALABEL only; it fails to validate private keys. When a private key lacks a CKAID, the...