Security: randombit/botan
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Quadratic complexity decoding BER indefinite length encodingsGHSA-7q2v-3g27-6g3j published
May 7, 2026 by randombitModerate -
TLS 1.3 out of sequence ApplicationDataGHSA-pxcj-9ppx-g86g published
Apr 7, 2026 by randombitCritical -
Certificate authentication bypass due to trust anchor confusionGHSA-v782-6fq4-q827 published
Apr 7, 2026 by randombitCritical -
Heap Buffer Over-read (up to 31 bytes) in SM2 Decryption via Undersized C3 Hash FieldGHSA-7jj6-4r42-w9h6 published
Mar 29, 2026 by randombitHigh -
Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)GHSA-7c3g-7763-ggj5 published
Mar 29, 2026 by randombitModerate -
Missing OCSP Response Signature Verification Allows MitM Certificate Revocation BypassGHSA-9j2j-hqmc-hf5x published
Mar 29, 2026 by randombitModerate -
Authorization Error due to Name Constraint Decoding BugGHSA-jp24-56jm-gg86 published
Jul 8, 2024 by randombitModerate -
Denial of Service Due to Overly Large Elliptic Curve ParametersGHSA-w4g2-7m2h-7xj7 published
Jun 29, 2024 by randombitModerate -
Denial of Service Due to Excessive Name ConstraintsGHSA-5gg9-hqpr-r58j published
Jul 8, 2024 by randombitModerate -
OCSP Certificate Verification CheckGHSA-4v9w-qvcq-6q7w published
Nov 16, 2022 by randombitModerate