randombit botan

• CVE-2026-118769 Critical 9.2 Botan: Integer overflow when reporting block size in FFI can cause memory corruption 0.4%
• CVE-2026-118768 Medium 5.9 Botan: CLI utility `ocsp_check` accepts unauthenticated responses <0.1%
• CVE-2026-118767 Medium 4.8 Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs 0.2%
• CVE-2026-118766 Medium 6.1 Botan: Online OCSP redirects enable blind requests to internal HTTP services <0.1%
• CVE-2026-118765 High 7.3 Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state 0.1%
• CVE-2026-44378 Medium 6.9 Botan: Quadratic complexity decoding BER indefinite length encodings 0.3%
• CVE-2026-34582 Critical 9.1 Botan has a TLS 1.3 certificate authentication bypass 0.2%
• CVE-2026-34580 Critical 9.1 Botan has a certificate authentication bypass due to trust anchor confusion 0.5%
• CVE-2026-32877 High 8.2 Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field 0.3%
• CVE-2026-32883 Medium 5.9 Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass 0.2%
• CVE-2026-32884 Medium 5.9 Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) 0.2%
• CVE-2024-39312 Medium 5.3 Botan has an Authorization Error due to Name Constraint Decoding Bug 0.3%
• CVE-2024-34702 Medium 5.3 Botan has a Denial of Service Due to Excessive Name Constraints 0.8%
• CVE-2024-34703 High 7.5 Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters 0.5%