Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7hfw-r8qc-89v4

Опубликовано: 07 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

EPSS

Процентиль: 28%
0.00358
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 7.5
redhat
4 месяца назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 7.5
nvd
4 месяца назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 5.9
msrc
4 месяца назад

Incorrect enforcement of email constraints in crypto/x509

CVSS3: 7.5
debian
4 месяца назад

When verifying a certificate chain which contains a certificate contai ...

EPSS

Процентиль: 28%
0.00358
Низкий

7.5 High

CVSS3

Дефекты

CWE-295