Skip to content
OpenAdvisories

Package · Hackage

x509-validation

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2026-9648

    CVE-2026-9648

    The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromise…

    Haskell Programming Language crypton-certificate x509-validation haskell-crypton-x509-validation Debian Ubuntu Hackage
  • Unscored —
    HSEC-2023-0006

    x509-validation does not enforce pathLenConstraint

    # x509-validation does not enforce pathLenConstraint *x509-validation* prior to version 1.4.8 did not enforce the pathLenConstraint value. Constrained CAs could accidentally (or deliberately) issue CAs below the maximum depth and *x509-validation* would accep…

    x509-validation Hackage