CVE-2026-9648

The crypton-x509-validation Haskell library contains a vulnerability where it fails to enforce X.509 NameConstraints . This allows TLS clients to accept certificates with Subject Alternative Names falling outside the issuing CA’s permitted subtrees. An attacker who compromises a name-constrained ...