high7.4
CVE-2026-45389
In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), whi…
Impact
In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificates that are not meant for client authentication (because of KeyUsage and ExtendedKeyUsage).
Affected products
| Product | Affected versions |
|---|---|
| OCaml-TLS | before 2.1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.