CVE-2026-45388

OCaml-TLS versions prior to 2.1.0 are vulnerable to a certificate validation flaw during TLS 1.3 handshakes. The client implementation fails to call the validate_keyusage function in handshake_client13.ml, meaning it does not verify the KeyUsage and ExtendedKeyUsage (EKU) extensions. Consequently...