Skip to content
OpenAdvisories

Package · Hex

ssl_verify_fun

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-117666

    ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

    Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate that carries a partial-label wildcard. try_match_wildcard/4 in src/ssl_verify_hos…

    deadtrickster ssl_verify_fun rebar3 ssl_verify_fun Debian Hex