Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

botan — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in botan, with AI-generated Chinese analysis, references, and POCs.

Vendor: Randombit

CVE IDTitleCVSSSeverityPublished
CVE-2026-44378 Botan: Quadratic complexity decoding BER indefinite length encodings CWE-407--2026-05-27
CVE-2026-34582 Botan has a TLS 1.3 certificate authentication bypass CWE-841 8.2AIHighAI2026-04-07
CVE-2026-34580 Botan has a certificate authentication bypass due to trust anchor confusion CWE-295 5.3AIMediumAI2026-04-07
CVE-2026-32877 Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field CWE-125 8.2 High2026-03-30
CVE-2026-32883 Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass CWE-347 5.9 Medium2026-03-30
CVE-2026-32884 Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) CWE-295 5.9 Medium2026-03-30
CVE-2024-39312 Botan has an Authorization Error due to Name Constraint Decoding Bug CWE-295 5.3 Medium2024-07-08
CVE-2024-34702 Botan has a Denial of Service Due to Excessive Name Constraints CWE-405 5.3 Medium2024-07-08
CVE-2024-34703 Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters CWE-405 7.5 High2024-06-30
CVE-2017-2801 Randombit Botan cryptographic库安全漏洞 9.8 -2017-05-24

All 10 known CVE vulnerabilities affecting botan with full Chinese analysis, references, and POCs where available.