https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:48:22.308333+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-175889 EUVD-2026-175889 2026-10-15T03:48:22.389248+00:00 EUVD-2026-175889 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3908 fkie_cve-2021-3908 2026-10-15T03:48:22.389283+00:00

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

 https://cve.radiocsirt.org/vuln/ghsa-g5gj-9ggf-9vmq GHSA-g5gj-9ggf-9vmq — Infinite certificate chain depth results in OctoRPKI running forever 2026-10-15T03:48:22.389315+00:00

Affected: Go: github.com/cloudflare/cfrpki

OctoRPKI (github.com/cloudflare/cfrpki/cmd/octorpki) does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

### For more information If you have any questions or comments about this advisory email us at security@cloudflare.com

 https://cve.radiocsirt.org/vuln/gsd-2021-3908 gsd-2021-3908 2026-10-15T03:48:22.389341+00:00 gsd-2021-3908 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3908 Withdrawn: UBUNTU-CVE-2021-3908 2026-10-15T03:48:22.389355+00:00

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: cfrpki

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.