Skip to content
OpenAdvisories

Product · Privasys

go

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

    Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the …