Threats tagged 'ghsa-m8r2-qgr6-4gqm'

This vulnerability involves certificates with wildcard DNS Subject Alternative Names (SANs) bypassing Certificate Authority (CA) name-constraint checks. Specifically, a certificate containing a wildcard DNS SAN (e.g., *.example.com) that should be rejected due to the issuing CA's permitted or excluded DNS name constraints may be incorrectly accepted. This issue relates to improper enforcement of name constraints in certificate validation.