PT-2026-109325

Name of the Vulnerable Software and Affected Versions Privasys Go versions prior to 0.5.1-go1.26.5 Description In the challenge-mode RA-TLS Remote Attestation TLS implementation within crypto/tls, the software fails to bind the ReportData of the attestation quote to the active TLS session, bindin...

CVE-2026-108269: Origin Validation Error

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...