ra-tls-clients vulnerabilities
CVEs whose affected-version data names the ra-tls-clients package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-108362Critical· 9.1Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized p…
CVE-2026-108361High· 7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successfu…
CVE-2026-108269Critical· 9.1Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key an…