Threats tagged 'ghsa-58fj-7xwc-45hq'

A vulnerability in wolfSSL allows an un-negotiated Raw Public Key (RPK) to be accepted in place of an X.509 certificate, bypassing certificate chain validation. This occurs because the parsing function accepts raw public keys without trust verification unless RPK was explicitly negotiated. The issue affects wolfSSL builds with Raw Public Key support enabled, which is disabled by default in standalone builds but enabled with --enable-all. The vulnerability has a CVSS score of 7.5 and is classified as medium severity.