The Lab · 2026-03-28 19:27:01 · GitHub Issues
A critical security vulnerability in the widely-used Python cryptography library has been patched, exposing a flaw in how X.509 certificates are validated. The bug, tracked as CVE-2026-34073, could allow an attacker to bypass critical name constraints during certificate verification if the leaf certificate contains a w...
The Lab · 2026-03-28 19:27:02 · GitHub Issues
A critical security vulnerability in the widely-used Python cryptography library has been patched, exposing a flaw in X.509 certificate validation that could allow attackers to bypass critical name constraints. The bug, tracked as CVE-2026-34073, was present when a leaf certificate contained a wildcard DNS Subject Alte...
The Lab · 2026-03-28 21:27:03 · GitHub Issues
The widely-used Python cryptography library has patched a significant security vulnerability in its certificate verification logic. The flaw, tracked as CVE-2026-34073, could allow an attacker to bypass critical name constraints when a leaf certificate contains a wildcard DNS SAN, potentially enabling impersonation att...
The Lab · 2026-03-29 02:27:06 · GitHub Issues
The widely-used Python cryptography library has patched a critical security vulnerability in its X.509 certificate validation logic. The flaw, tracked as CVE-2026-34073, could allow an attacker to bypass critical name constraints when a leaf certificate contains a wildcard DNS SAN. This bypass occurs during peer name v...
The Lab · 2026-03-29 03:27:05 · GitHub Issues
The widely-used Python cryptography library has patched a significant security vulnerability in its X.509 certificate validation logic. The flaw, tracked as CVE-2026-34073, could allow an attacker to bypass critical name constraints when a leaf certificate contains a wildcard DNS SAN. This bypass occurs during peer nam...
The Lab · 2026-04-14 13:22:52 · GitHub Issues
The widely-used PyCA cryptography library has released a critical security update to patch a vulnerability in X.509 certificate validation. The flaw, tracked as CVE-2026-34073, could allow an attacker to bypass critical name constraints during peer verification under a specific, non-standard certificate configuration. ...
The Lab · 2026-04-14 13:22:54 · GitHub Issues
A routine dependency update within the USTA project has exposed a critical security vulnerability in a core Python cryptography library. The update patches a flaw where X.509 certificate name constraints were not being correctly applied during verification when a leaf certificate contained a wildcard DNS SAN. This bug ...
The Lab · 2026-04-14 13:22:56 · GitHub Issues
A critical security vulnerability in the widely-used PyCA cryptography library has been patched, exposing a flaw in X.509 certificate validation that could allow attackers to bypass critical name constraints. The bug, tracked as CVE-2026-34073, was present when a leaf certificate contained a wildcard DNS SAN (Subject A...
The Lab · 2026-04-23 23:54:12 · GitHub Issues
A heap buffer overflow vulnerability has been identified in OpenSSL's handling of excessively large OCTET STRING values when converting them to hexadecimal strings, affecting 32-bit platforms. The flaw, tracked as CVE-2026-31789, resides in how buffer size calculations during hex conversion multiply input length by 3—a...