CVE-2026-45389

OCaml-TLS versions prior to 2.1.0 are vulnerable to a security weakness where the server implementation fails to properly validate the KeyUsage and ExtendedKeyUsage extensions of client certificates during mutual TLS (mTLS) authentication. Specifically, the library does not verify if a certificat...