PT-2023-35498 · Unknown · X509-Validation

Published 2023-07-19 · Updated 2025-11-14

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions x509-validation versions prior to 1.4.8

Description The issue concerns the failure to enforce the pathLenConstraint value, allowing constrained CAs to potentially issue certificates below the maximum depth. This could lead to the acceptance of certificates issued by unauthorized intermediate CAs.

Recommendations For versions prior to 1.4.8, update to version 1.4.8 or later to enforce the pathLenConstraint value and prevent the acceptance of certificates issued by unauthorized intermediate CAs.

Related Identifiers

HSEC-2023-0006

Affected Products

X509-Validation

References · 5

• https://osv.dev/vulnerability/HSEC-2023-0006 · Vendor Advisory
• https://github.com/haskell-tls/hs-certificate/commit/06d15dbbc53739314760d8504ca764000770e46e · Note
• https://github.com/haskell/security-advisories · Note
• https://haskell.github.io/security-advisories · Note
• https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export · Note