Crypton Certificate
Approved changes feed: RSS · Atom
cpe:2.3:a:haskell_programming_language:crypton-certificate:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Haskell Programming Language (b883e908-1471-563b-92be-0170f4c2c3ae) |
|---|---|
| Product | Crypton Certificate (271153fa-84d4-5a8d-a01b-07aaced700b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9648 |
vulnerable | 2026-07-29 01:12:09.474020 |
CVE-2026-9648
The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to impersonate domains beyond its intended scope.
Published: 2026-06-11T14:30:30.800Z
Updated: 2026-06-11T15:39:31.210Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.