What is GHSA-8wf9-g5q8-gg97?

GHSA-8wf9-g5q8-gg97 is a security advisory published by GitHub Security Advisories with Critical severity. In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate...

Which CVE IDs does GHSA-8wf9-g5q8-gg97 cover?

GHSA-8wf9-g5q8-gg97 covers the following CVE IDs: CVE-2026-45389. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8wf9-g5q8-gg97?

GHSA-8wf9-g5q8-gg97 has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-8wf9-g5q8-gg97CriticalCVSS 9.1

In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-45389 →

📋 Description

In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificates that are not meant for client authentication (because of KeyUsage and ExtendedKeyUsage).

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-45389
https://osv.dev/vulnerability/OSEC-2026-07
https://github.com/advisories/GHSA-8wf9-g5q8-gg97