Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6f52-wpx2-hvf2

Опубликовано: 11 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

EPSS

Процентиль: 29%
0.00374
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

CVSS3: 7.5
redhat
больше 1 года назад

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

CVSS3: 7.5
nvd
больше 1 года назад

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

CVSS3: 7.5
msrc
около 1 года назад

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

CVSS3: 7.5
debian
больше 1 года назад

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsag ...

EPSS

Процентиль: 29%
0.00374
Низкий

7.5 High

CVSS3