https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:22:44.292641+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-237700 EUVD-2026-237700 2026-10-06T17:22:44.356490+00:00 EUVD-2026-237700 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3616 fkie_cve-2022-3616 2026-10-06T17:22:44.356527+00:00

Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-pmw9-567p-68pc GHSA-pmw9-567p-68pc — OctoRPKI crashes when max iterations is reached 2026-10-06T17:22:44.356573+00:00

Affected: Go: github.com/cloudflare/cfrpki

### Impact Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability.

### Specific Go Packages Affected github.com/cloudflare/cfrpki/cmd/octorpki

### Patches This issue is fixed in v1.4.4

### Workarounds None.

 https://cve.radiocsirt.org/vuln/gsd-2022-3616 gsd-2022-3616 2026-10-06T17:22:44.356602+00:00 gsd-2022-3616 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3616 UBUNTU-CVE-2022-3616 2026-10-06T17:22:44.356615+00:00

Affected: Ubuntu:22.04:LTS: cfrpki

Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability.