mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

emudhra-weak-keys

emudra-weak-keys This is a Zeek package to detect connections that use eMudhra intermediate CA certificates with compromised/well-known private keys. For more information see, e.g., the original Bugzilla entry or https://emudhra.we-have-a-problem.com/. Please note that this detection only works f...

ca-certificates: Fix of CVE-2026-114406

Comodo AAA Services root AAA Certificate Services is no longer trusted for TLS server authentication through the legacy bundle: it issued the Sectigo cross-signs of the compromised eMudhra intermediates Mozilla bug 2083449. Its legacy e-mail and code-signing trust is kept...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

npm: Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

npm: Forge: verifyCertificateChain removes trusted CA certificates with the same subject from the CA store vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-9H75-RF66-WH3R vulnerabilities

Vulnerabilities for packages: ca-certificates...

CVE-2026-91403 vulnerabilities

Vulnerabilities for packages: ca-certificates...

GHSA-9H75-RF66-WH3R vulnerabilities

Vulnerabilities for packages: ca-certificates...

CVE-2026-91403 vulnerabilities

Vulnerabilities for packages: ca-certificates...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (python-botocore) security update

An update for python-botocore is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

Medium: oci-add-hooks

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3337)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3337 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra...

EUVD-2026-111406

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp product...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...