CVE-2021-40855

CVE-2021-40855 concerns the EU Technical Specifications for Digital COVID Certificates before version 1.1, where certificate governance is mishandled. The vulnerability arises from allowing a non-production public key certificate to be used in production, potentially impacting the trust chain and...