RA
Vendor
randombit
14
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118769 New | BO botan randombit | 9.2 | Oct 29 | Botan: Integer overflow when reporting block size in FFI can cause memory corruption |
| CVE-2026-118768 New | BO botan randombit | 5.9 | Oct 29 | Botan: CLI utility `ocsp_check` accepts unauthenticated responses |
| CVE-2026-118767 New | BO botan randombit | 4.8 | Oct 29 | Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs |
| CVE-2026-118766 New | BO botan randombit | 6.1 | Oct 29 | Botan: Online OCSP redirects enable blind requests to internal HTTP services |
| CVE-2026-118765 New | BO botan randombit | 7.3 | Oct 29 | Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state |
| CVE-2026-44378 | BO botan randombit | 7.5 | May 27 | Botan: Quadratic complexity decoding BER indefinite length encodings |
| CVE-2026-34582 | BO botan randombit | 9.1 | Apr 7 | Botan has a TLS 1.3 certificate authentication bypass |
| CVE-2026-34580 | BO botan randombit | 7.5 | Apr 7 | Botan has a certificate authentication bypass due to trust anchor confusion |
| CVE-2026-32877 | BO botan randombit | 8.2 | Mar 30 | Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field |
| CVE-2026-32883 | BO botan randombit | 5.9 | Mar 30 | Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass |
| CVE-2026-32884 | BO botan randombit | 5.9 | Mar 30 | Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) |
| CVE-2024-39312 | BO botan randombit | 5.3 | Jul 8 | Botan has an Authorization Error due to Name Constraint Decoding Bug |
| CVE-2024-34702 | BO botan randombit | 5.3 | Jul 8 | Botan has a Denial of Service Due to Excessive Name Constraints |
| CVE-2024-34703 | BO botan randombit | 7.5 | Jun 30 | Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters |