HSEC-2023-0006 x509-validation does not enforce pathLenConstraint

x509-validation does not enforce pathLenConstraint x509-validation prior to version 1.4.8 did not enforce the pathLenConstraint value. Constrained CAs could accidentally or deliberately issue CAs below the maximum depth and x509-validation would accept certificates issued by the unauthorised...

PT-2023-35498

Name of the Vulnerable Software and Affected Versions x509-validation versions prior to 1.4.8 Description The issue concerns the failure to enforce the pathLenConstraint value, allowing constrained CAs to potentially issue certificates below the maximum depth. This could lead to the acceptance of...