CVE-2026-9697

undici’s ProxyAgent drops the requestTls option when used with a SOCKS5 proxy (socks5:// or socks://), causing the HTTPS connection to rely on Node’s default trust store and ignore user-provided ca, cert, key, rejectUnauthorized, and servername. This allows any cert signed by a publicly trusted C...

PT-2026-34188

Name of the Vulnerable Software and Affected Versions Oxia versions prior to 0.16.2 Description The trustedCertPool function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates, such as an intermediate and a root CA,...

CVE-2026-25645

A flaw was found in the requests HTTP library, specifically in the requests.utils.extractzippedpaths function, which is used to load Certificate Authority CA bundles. A local attacker can exploit this vulnerability by pre-creating a malicious CA bundle file in the system's temporary directory. Wh...

CLSA-2026-1774279106 Update of alt-php

Update ca-certificates database to 20260303: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.84. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

PT-2026-46287

Update ca-certificates database to 20260303: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.84. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

CLSA-2026-1773684237 Update of alt-php

Update ca-certificates database to 20260305: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.84. - The following certificates were added: Certificate "TrustAsia TLS ECC Root CA" Certificate "TrustAsia TLS RSA Root CA" Certificate "SwissSign RSA TLS Roo...

PT-2026-46284

Update ca-certificates database to 20260305: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.84. - The following certificates were added: Certificate "TrustAsia TLS ECC Root CA" Certificate "TrustAsia TLS RSA Root CA" Certificate "SwissSign RSA TLS Root...

PT-2026-46279

Update ca-certificates database to 20260129: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the CLI login command when the -skip-verify flag is used without the --cacert flag. An attacker can intercept sensitive information or perform man-in-the-middle attacks by exploiting the lack of proper...

PT-2026-46277

Update ca-certificates database to 20260210: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "ePKI Root Certification Authority" - The following certificates were added: Certificate "TrustAsia T...

PT-2026-46278

Update ca-certificates database to 20260210: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "Entrust Root Certification Authority" Certificate "ePKI Root Certification Authority" Certificate...

curl: Silent TLS Trust Model Hijacking via `CURL_CA_BUNDLE` Environment Variable Leads to MITM

Summary: curl is vulnerable to silent Man-in-the-Middle MITM attacks due to its design, which implicitly trusts the CA certificate path specified in the CURLCABUNDLE environment variable. This mechanism allows the entire TLS trust model chain of trust of curl to be hijacked without any warning or...

PT-2025-55347

Update ca-certificates database to 20250418: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Entrust Root Certification Authority"...

PT-2025-55346

Update ca-certificates database to 20250418: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust Root Certification Authority - G4" Certificate "Security Communication ECC RootCA1"...

PT-2025-55339

Update ca-certificates database to 20250416: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Entrust Root Certification Authority"...

PT-2025-55338

Update ca-certificates database to 20250416: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "certSIGN ROOT CA" Certificate "ACCVRAIZ1" Certificate "Entrust Root Certification Authority - G4"...

PT-2024-41917

Update ca-certificates database to 20240823: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.69. - The following certificates were updated: Certificate "OISTE WISeKey Global Root GC CA" - The following certificates were added: Certificate "Telekom...

PT-2024-41918

Update ca-certificates database to 20240823: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.69. - The following certificates were updated: Certificate "OISTE WISeKey Global Root GC CA" - The following certificates were added: Certificate "Telekom...

PT-2024-41919

Update ca-certificates database to 20240909: - mozillacertdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.70. - The following certificates were updated: Certificate "certSIGN ROOT CA" Certificate "ACCVRAIZ1" Certificate "OISTE WISeKey Global Root GC CA" - The...

PT-2024-41021 · Unknown · Ca-Certificates

Name of the Vulnerable Software and Affected Versions: ca-certificates affected versions not specified Description: The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.64 version of the Mozilla certificate...