BO
Product
botan
14
CVEs
0
On KEV
9.2
Max CVSS
5
New 30D
Severity mix
Critical 2High 5Medium 7Low 0
Watch
Add botan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32877 | 8.2 | Mar 30 | Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field Affected: >= 2.3.0, < 3.11.0 |
| CVE-2026-44378 | 7.5 | May 27 | Botan: Quadratic complexity decoding BER indefinite length encodings Affected: < 3.12.0 |
| CVE-2026-34580 | 7.5 | Apr 7 | Botan has a certificate authentication bypass due to trust anchor confusion Affected: >= 3.11.0, < 3.11.1 |
| CVE-2024-34703 | 7.5 | Jun 30 | Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters Affected: >= 3.0.0-alpha0, < 3.3.0; < 2.19.4 |
| CVE-2026-118765 New | 7.3 | Oct 29 | Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state Affected: >= 3.7.0, < 3.13.0 |
Showing 5