Randombit Botan vulnerabilities
17 published CVEs name Randombit Botan among the affected products.
- 17Published CVEs17 of them scored
- 13Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-104267
Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters
randombit · botan
Medium4.1 - CVE-2026-48057
Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn
randombit · botan
Low2.1 - CVE-2026-118769
Botan: Integer overflow when reporting block size in FFI can cause memory corruption
randombit · botan
Critical9.2 - CVE-2026-118768
Botan: CLI utility `ocsp_check` accepts unauthenticated responses
randombit · botan
Medium5.9 - CVE-2026-118767
Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs
randombit · botan
Medium4.8 - CVE-2026-118766
Botan: Online OCSP redirects enable blind requests to internal HTTP services
randombit · botan
Medium6.1 - CVE-2026-118765
Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state
randombit · botan
High7.3 - CVE-2026-44378
Botan: Quadratic complexity decoding BER indefinite length encodings
randombit · botan
Medium6.9 - CVE-2026-34582
Botan has a TLS 1.3 certificate authentication bypass
randombit · botan
High8.7 - CVE-2026-34580
Botan has a certificate authentication bypass due to trust anchor confusion
randombit · botan
Critical9.3