ssl_verify_fun vulnerabilities

CVEs whose affected-version data names the ssl_verify_fun package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117666Critical· 9.1

1w ago

ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate that carries a partial-label wildcard. try_match_wildcard/4…

▾ Midnightdeadtrickster · ssl_verify_funEPSS 0.19%via CVEORG