Threats tagged 'ghsa-5v5p-5xxr-9xf8'

1 threat

Threats tagged 'ghsa-5v5p-5xxr-9xf8'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.2	EPSS 0.2%	CVE-2026-87733mirage-crypto-ec · Improper Certificate Validation Medium6.2EPSS 0.2%2026-09-09CVE Database V5CVE-2026-87733 A vulnerability in the mirage-crypto-ec library for OCaml versions before 2.2.0 allows improper certificate validation. The ECDSA functions for P256, P384, and P521 curves accept the encoding of the point at infinity (0x00) as a valid public key. This flaw enables forging signatures without possessing the private key. EPSS 0.2%Vulnerability OCaml #cwe-295 #ghsa-5v5p-5xxr-9xf8 #osec-2026-13	CVE Database V5	2026-09-09

Showing 1–1 of 1 result