Skip to content
OpenAdvisories

Package · Alpine

botan3

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    Botan has a certificate authentication bypass due to trust anchor confusion

    Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a DN (and subject key identifier, if set) matching that of the argument. It did n…