CVE-2026-45388

OCaml-TLS prior to 2.1.0 allows TLS 1.3 servers to impersonate when a server certificate lacks EKU serverAuth, due to a missing linkage between the TLS 1.3 certificate path and the existing EKU validation. The OSV/PT-Security findings show that the TLS 1.3 handshake accepts non-server-auth certif...