Skip to content
OpenAdvisories
Unscored CVE-2013-0243 EUVD-2013-0275GHSA-4q83-8359-v5v3HSEC-2023-0005

tls-extra: certificate validation does not check Basic Constraints

Published Dec 5, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Vendor: haskell-tls-extra Product: haskell-tls-extra Package: tls-extra Ecosystem: Hackage

Description

haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections

Affected products

VendorProductAffectedFixed
haskell-tls-extra haskell-tls-extra < 0.6.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Hackage tls-extra >= 0.1.0, < 0.4.6.1 0.4.6.1 HSEC-2023-0005

References