Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:47:00 +0000 EUVD-2026-104599 https://cve.radiocsirt.org/vuln/euvd-2026-104599 EUVD-2026-104599 https://cve.radiocsirt.org/vuln/euvd-2026-104599 fkie_cve-2013-0243 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0243 <p>haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections</p> <p>haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0243 GHSA-4q83-8359-v5v3 https://cve.radiocsirt.org/vuln/ghsa-4q83-8359-v5v3 <p>haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections</p> <p>haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections</p> https://cve.radiocsirt.org/vuln/ghsa-4q83-8359-v5v3 gsd-2013-0243 https://cve.radiocsirt.org/vuln/gsd-2013-0243 gsd-2013-0243 https://cve.radiocsirt.org/vuln/gsd-2013-0243 HSEC-2023-0005 — tls-extra: certificate validation does not check Basic Constraints https://cve.radiocsirt.org/vuln/hsec-2023-0005 <p><strong>Affected:</strong> Hackage: tls-extra</p> <p># tls-extra: certificate validation does not check Basic Constraints</p> <p>*tls-extra* does not check the Basic Constraints extension of a certificate in certificate chain processing. Any certificate is treated as a CA certificate. As a consequence, anyone who has a valid certificate can use it to sign another one (with an arbitrary subject DN/domain name embedded into it) and have it accepted by *tls*. This allows MITM attacks on TLS connections.</p> <p><strong>Affected:</strong> Hackage: tls-extra</p> <p># tls-extra: certificate validation does not check Basic Constraints</p> <p>*tls-extra* does not check the Basic Constraints extension of a certificate in certificate chain processing. Any certificate is treated as a CA certificate. As a consequence, anyone who has a valid certificate can use it to sign another one (with an arbitrary subject DN/domain name embedded into it) and have it accepted by *tls*. This allows MITM attacks on TLS connections.</p> https://cve.radiocsirt.org/vuln/hsec-2023-0005