3859 matches found
PT-2026-77284
Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/authorities with type=subca did not require AuthorityPermission on the parent authority when ADMIN ONLY AUTHORITY CREATION was false. AssociatedAuthoritySchema resolved the caller-supplied parent and passed it through authority...
CVE-2026-57826
An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...
CVE-2026-57826
openHiTLS (a TLS protocol implementation) is affected in versions 0.2.0 through 0.3.2 . During X.509 certificate chain verification , the basic constraints extension and CA flag of intermediate CAs are only validated for v3 certificates; v1 and v2 intermediate certificates are ignored, potentiall...
CVE-2026-57826
An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...
EUVD-2026-61278
An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...
CVE-2026-57826
An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...
BIT-CONSUL-2026-19015 Uncontrolled resource consumption in the Consul Connect CA roots endpoint
Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a remote caller to grow the agent's Connect CA roots cache without bound, defeating the operator's cache-disable...
Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter
When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP uid search filter without proper escaping. An unauthenticated attacker with network access to the CA enrollment endpoint could exploit this to perform LDAP injection before passwo...
GHSA-XGHW-P77P-3R7X Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter
When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP uid search filter without proper escaping. An unauthenticated attacker with network access to the CA enrollment endpoint could exploit this to perform LDAP injection before passwo...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step, step-ca-fips, caddy-fips, step-fips, step-issuer-fips, caddy, step-ca, step-issuer...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step, step-ca-fips, caddy-fips, step-fips, step-issuer-fips, caddy, step-ca, step-issuer...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: gitness, cloudflared, rclone-fips, caddy, tkn, step, step-fips, step-issuer, karma, dapr, kyverno-policy-reporter-ui-fips, sftpgo, step-ca, rclone, gogatekeeper, kyverno-policy-reporter-ui, dapr-fips, telegraf, step-ca-fips, caddy-fips, buf, tkn-fips, step-issuer-fip...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: frankenphp-8.2, step-ca-fips, frankenphp-8.3, caddy-fips, frankenphp-8.4, step-issuer-fips, caddy, frankenphp-8.5...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: step, kots, argo-workflows, argo-workflows-fips, caddy-fips, trillian, caddy, step-ca, wavefront-collector-for-kubernetes, trillian-fips...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: smarter-device-manager-fips, skaffold, kube-bench-fips, kyverno, kubeflow-pipelines, kyverno-notation-aws, caddy, cert-exporter-fips, kyverno-notation-aws-fips, sigstore-scaffolding, sigstore-scaffolding-fips, google-osconfig-agent, terraform-provider-google, amass,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: tflint, restic, kots, conftest, sops, temporal, terragrunt, kube-rbac-proxy, falcosidekick, rqlite, terraform-docs, fulcio, kaniko, dbmate, vcluster, opentelemetry-collector-contrib, k8sgpt, k3d, spicedb, grpc-health-probe, kubernetes-csi-external-provisioner, kargo,...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step, step-ca, caddy, step-issuer...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step, step-ca, caddy, step-issuer...