CVE-2026-118371

LibreSSL versions through 4.4.0 are vulnerable to a CRLF injection vulnerability in the libcrypto library. The flaw resides in the OCSP_sendreq_new() and OCSP_parse_url() functions, which fail to validate request paths before writing them into the OCSP POST request line. An attacker can exploit t...