Skip to content
OpenAdvisories

Vendor

trailofbits

15 known vulnerabilities.

Products

fickling 11 rfc3161-client 2 uthenticode 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-33753

    Improper Certificate Validation in rfc3161-client

    rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Aut…

    trailofbits rfc3161-client rfc3161-client PyPI
  • Medium 5.9
    CVE-2023-40012

    uthenticode EKU validation bypass

    uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profil…

    trailofbits uthenticode