CVE-2026-45388

OCaml-TLS versions prior to 2.1.0 are vulnerable to a certificate validation flaw during TLS 1.3 handshakes. The client implementation fails to call the validate_keyusage function in handshake_client13.ml, meaning it does not verify the KeyUsage and ExtendedKeyUsage (EKU) extensions. Consequently...

EUVD-2025-203347

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

PT-2024-2663

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description The issue is related to the implementation of TLS protocols in libcurl, where the server certificate is not checked when connecting to a host specified as an IP address, when built to use...