https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:47:28.054832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-104599 EUVD-2026-104599 2026-10-02T23:47:28.058279+00:00 EUVD-2026-104599 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0243 fkie_cve-2013-0243 2026-10-02T23:47:28.058313+00:00

haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections

 https://cve.radiocsirt.org/vuln/ghsa-4q83-8359-v5v3 GHSA-4q83-8359-v5v3 2026-10-02T23:47:28.058345+00:00

haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections

 https://cve.radiocsirt.org/vuln/gsd-2013-0243 gsd-2013-0243 2026-10-02T23:47:28.058362+00:00 gsd-2013-0243 https://cve.radiocsirt.org/vuln/hsec-2023-0005 HSEC-2023-0005 — tls-extra: certificate validation does not check Basic Constraints 2026-10-02T23:47:28.058374+00:00

Affected: Hackage: tls-extra

# tls-extra: certificate validation does not check Basic Constraints

*tls-extra* does not check the Basic Constraints extension of a certificate in certificate chain processing. Any certificate is treated as a CA certificate. As a consequence, anyone who has a valid certificate can use it to sign another one (with an arbitrary subject DN/domain name embedded into it) and have it accepted by *tls*. This allows MITM attacks on TLS connections.