mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

Vulnerability fixed in LXD by Canonical

Canonical has patched a vulnerability in LXD. The vulnerability CVE-2026-112816 stems from improper validation of certificate chains within Canonical’s LXD HTTPS API. It affects LXD versions prior to 4.0.15, 5.0.11, 5.21.9, and 6.10.1 within their respective release branches. As a result,...

LXD 6.10.0 Client Certificate Chain Authentication Bypass

Canonical LXD versions 4.0.14, 5.0.10, 5.21.8, and 6.9.0 through 6.10.0, along with affected MicroCloud releases, contain an authentication bypass through unverified client certificate chains. https://packetstorm.news/download/238890...

Exploit for CVE-2026-112816

CVE-2026-112816 — Ubuntu LXD & MicroCloud Security Updater...

Exploit for CVE-2026-112816

CVE-2026-112816 — Ubuntu LXD & MicroCloud Security Updater...

CLEANSTART-2026-VH39074 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

CVE-2025-61727 affects multiple packages. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-MQ69584 vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust

Security vulnerability affects the gnutls package. A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust...

CLEANSTART-2026-CW26655 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service

CVE-2026-32281 affects multiple packages. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual vulnerability details...

CVE-2022-3602

CVE−2022-3602 What is this? This document and repository is a write-up of CVE−2022-3602, a punycode buffer overflow issue in OpenSSL. It's an "anti-POC" the issue does not appear to exploitable intended for folks who maintain their own OpenSSL builds and for compiler maintainers. There is a...

CLEANSTART-2024-SC60568 When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator

CVE-2020-12421 affects multiple packages. When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected even if they were legitimately added by an administrator. See references for individual vulnerability details...

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

CLEANSTART-2026-JQ42844 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service

CVE-2026-32281 affects multiple packages. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual vulnerability details...

CLEANSTART-2026-MH13170 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

CVE-2026-27137 affects multiple packages. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint wil...

CLEANSTART-2024-RX73766 Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate

Security vulnerability affects the go package. Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate...

CLEANSTART-2026-JP47993 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service

CVE-2026-32281 affects multiple packages. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual vulnerability details...

CLEANSTART-2026-AL78815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

CVE-2025-61727 affects multiple packages. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HF45764 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

CVE-2026-27137 affects multiple packages. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint wil...

CLEANSTART-2026-LD46814 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

CVE-2025-61727 affects multiple packages. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-AT57670 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service

CVE-2026-32281 affects multiple packages. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual vulnerability details...

CLEANSTART-2026-FY51880 certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain

Security vulnerability affects the argo-workflows package. A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain...