{
 "about": "Paperlock findings, X.509 Name Constraints. A selection of the finding records in this publication, not a complete list of every report in the case; a library missing here is not thereby unaffected. Each row has its own date and source; read status words as of the stated date.",
 "page": "https://paperlock.org/findings/",
 "canonical_records": [
  "https://kb.cert.org/vuls/id/573195",
  "https://kb.cert.org/vuls/id/948176",
  "https://kb.cert.org/vuls/id/410595"
 ],
 "count": 25,
 "libraries": 13,
 "findings": [
  {
   "id": "gnutls-dns-case",
   "url": "https://paperlock.org/findings/#f-gnutls-dns-case",
   "library": "GnuTLS",
   "finding": "DNS names and the domain part of email (rfc822Name) constraints compared case-sensitively; RFC 5280 requires case-insensitive matching for these. The local part of an email address is not case-insensitive.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "3.8.13 · CVE-2026-3833",
   "what_to_do": "Update to 3.8.13 or later",
   "date_kind": "released 2026-04-29",
   "note": "Independently co-reported by Oleh Konko (1seal) and Joshua Rogers (AISLE Research Team).",
   "sources": [
    {
     "label": "GnuTLS 3.8.13 announcement",
     "url": "https://lists.gnupg.org/pipermail/gnutls-help/2026-April/004923.html"
    }
   ]
  },
  {
   "id": "pyca-peer-name",
   "url": "https://paperlock.org/findings/#f-pyca-peer-name",
   "library": "pyca/cryptography",
   "finding": "DNS constraints were checked against the certificate's SANs but not against the requested peer name; for example, a wildcard certificate could be accepted for a peer name the constraints excluded.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "46.0.6 · CVE-2026-34073",
   "what_to_do": "Update to 46.0.6 or later",
   "date_kind": "advisory 2026-03-25",
   "note": "",
   "reproduction": "https://paperlock.org/method/#reproduce",
   "sources": [
    {
     "label": "GHSA-m959-cc7f-wv43",
     "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-m959-cc7f-wv43"
    }
   ]
  },
  {
   "id": "rustls-wildcard",
   "url": "https://paperlock.org/findings/#f-rustls-wildcard",
   "library": "rustls/webpki",
   "finding": "Wildcard certificates could be accepted under permitted name constraints even when the wildcard also covered names outside the permitted subtree.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "0.103.12 / 0.104.0-alpha.6 · GHSA-xgp8-3hg3-c2mh · CVE-2026-93601",
   "what_to_do": "Use 0.103.12 or later in the 0.103.x stable series, or 0.104.0-alpha.6 or later in the 0.104 prerelease series. For other release lines, follow the current advisory's patched-version ranges.",
   "date_kind": "checked 2026-10-10",
   "note": "Listed in the notes' references.",
   "sources": [
    {
     "label": "GHSA-xgp8-3hg3-c2mh",
     "url": "https://github.com/rustls/webpki/security/advisories/GHSA-xgp8-3hg3-c2mh"
    },
    {
     "label": "RUSTSEC-2026-0099",
     "url": "https://rustsec.org/advisories/RUSTSEC-2026-0099"
    }
   ]
  },
  {
   "id": "rustls-uri",
   "url": "https://paperlock.org/findings/#f-rustls-uri",
   "library": "rustls/webpki",
   "finding": "URI name constraints, which webpki does not support, were accepted instead of rejected. The fix rejects such chains (fails closed); webpki has no API for checking a URI identity.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "first fix 0.103.12 / 0.104.0-alpha.6; the excludedSubtrees case was completed in 0.103.13 / 0.104.0-alpha.7 · GHSA-965h-392x-2mh5 · CVE-2026-93600",
   "what_to_do": "Update to 0.103.13 or later (stable branch)",
   "date_kind": "checked 2026-10-10",
   "note": "RustSec's “patched” field still lists the first versions; the excluded-subtree case needs 0.103.13 / 0.104.0-alpha.7.",
   "reproduction": "https://paperlock.org/method/#reproduce",
   "sources": [
    {
     "label": "GHSA-965h-392x-2mh5",
     "url": "https://github.com/rustls/webpki/security/advisories/GHSA-965h-392x-2mh5"
    },
    {
     "label": "RUSTSEC-2026-0098",
     "url": "https://rustsec.org/advisories/RUSTSEC-2026-0098"
    },
    {
     "label": "release 0.103.13",
     "url": "https://github.com/rustls/webpki/releases/tag/v%2F0.103.13"
    },
    {
     "label": "PR #473 (excluded URI subtrees)",
     "url": "https://github.com/rustls/webpki/pull/473"
    }
   ]
  },
  {
   "id": "wolfssl-uri",
   "url": "https://paperlock.org/findings/#f-wolfssl-uri",
   "library": "wolfSSL",
   "finding": "URI name constraints were parsed but not enforced.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "5.9.1 · CVE-2026-5263",
   "what_to_do": "Update to 5.9.1 or later",
   "date_kind": "CVE published 2026-04-09",
   "note": "wolfSSL's advisory and release notes associate this URI report and reporter credit with CVE-2026-5263. Another public report uses that CVE for a different name form; the conflicting descriptions have not been reconciled here. CERT/CC VU#948176 (2026-10-14) cites CVE-2026-3547 (fixed in 5.9.0) for this report; the CVE-2026-3547 record describes a different issue, an out-of-bounds read in ALPN parsing. The URI Name Constraints record is CVE-2026-5263, fixed in 5.9.1.",
   "sources": [
    {
     "label": "CVE-2026-5263",
     "url": "https://www.cve.org/CVERecord?id=CVE-2026-5263"
    },
    {
     "label": "wolfSSL security advisories",
     "url": "https://www.wolfssl.com/docs/security-vulnerabilities/"
    },
    {
     "label": "wolfSSL 5.9.1 release",
     "url": "https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.1-stable"
    },
    {
     "label": "TALOS-2026-2410 (another report under this CVE)",
     "url": "https://eu.talosintelligence.com/vulnerability_reports/TALOS-2026-2410"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "wolfssl-wildcard",
   "url": "https://paperlock.org/findings/#f-wolfssl-wildcard",
   "library": "wolfSSL",
   "finding": "Fragment wildcards (such as *foo.com) checked against name constraints.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "5.9.1 · PR #9991",
   "what_to_do": "Update to wolfSSL 5.9.1 or later",
   "date_kind": "released 2026-04-08 · checked 2026-10-13",
   "note": "CERT/CC VU#948176 (2026-10-14) states that the wildcard was addressed in PR #9991. Upstream release notes include PR #9991 in wolfSSL 5.9.1. No CVE is attributed to this fragment-wildcard report here.",
   "sources": [
    {
     "label": "wolfSSL PR #9991",
     "url": "https://github.com/wolfSSL/wolfssl/pull/9991"
    },
    {
     "label": "wolfSSL 5.9.1 release",
     "url": "https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.1-stable"
    },
    {
     "label": "1seal evidence page",
     "url": "https://1seal.org/research/findings/F-WOLFSSL-NC-WILDCARD-001/"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "openssl-authority",
   "url": "https://paperlock.org/findings/#f-openssl-authority",
   "library": "OpenSSL",
   "finding": "The userinfo scan for @ continued past /, ? or #, so a host outside the URI authority was chosen.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "all versions publicly supported on 2026-09-10 · PR #30319",
   "what_to_do": "Use a currently supported OpenSSL release that contains PR #30319; follow your product vendor's update guidance",
   "date_kind": "vendor confirmation 2026-09-10",
   "note": "On 2026-09-10 OpenSSL confirmed that the fix was present in all versions publicly supported on that date. Branch-specific first fixed versions are not listed here.",
   "sources": [
    {
     "label": "openssl/openssl PR #30319",
     "url": "https://github.com/openssl/openssl/pull/30319"
    },
    {
     "label": "CERT/CC VU#573195",
     "url": "https://kb.cert.org/vuls/id/573195"
    }
   ]
  },
  {
   "id": "openssl-userinfo-colon",
   "url": "https://paperlock.org/findings/#f-openssl-userinfo-colon",
   "library": "OpenSSL",
   "finding": "Older URI parsing: a colon in userinfo before @ changed which host was used. Separate from PR #30319.",
   "status": "In triage",
   "status_kind": "open",
   "detail": "per CERT/CC VU#948176",
   "what_to_do": "Use a supported release with the rewritten URI parser (3.5.0 or later) and test your validator",
   "date_kind": "2026-10-14 · CERT/CC VU#948176",
   "note": "1seal’s test shows the 3.5.0 parser handles this case (URI parsing rewritten in PR #25861). OpenSSL has not published a fix statement for this report. Older branches: check with the vendor. Separate from PR #30319.",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    },
    {
     "label": "openssl/openssl PR #25861",
     "url": "https://github.com/openssl/openssl/pull/25861"
    }
   ]
  },
  {
   "id": "boringssl-8",
   "url": "https://paperlock.org/findings/#f-boringssl-8",
   "library": "BoringSSL",
   "finding": "A wildcard DNS name may not be treated as covering a specifically excluded host. Record VU#410595.8, legacy crypto/x509 path.",
   "status": "Fix merged upstream",
   "status_kind": "merged",
   "detail": "commit 5774eca, 2026-03-04",
   "what_to_do": "Update when your vendor ships the upstream change",
   "date_kind": "commit 2026-03-04",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#410595",
     "url": "https://kb.cert.org/vuls/id/410595"
    },
    {
     "label": "commit 5774eca",
     "url": "https://boringssl.googlesource.com/boringssl/+/5774eca"
    }
   ]
  },
  {
   "id": "boringssl-9",
   "url": "https://paperlock.org/findings/#f-boringssl-9",
   "library": "BoringSSL",
   "finding": "A URI with a colon before @ may cause the wrong host to be used when matching URI constraints. Record VU#410595.9, legacy crypto/x509 path.",
   "status": "Fix merged upstream",
   "status_kind": "merged",
   "detail": "commit b84dc60, 2026-05-05 · report accepted earlier",
   "what_to_do": "Update when your vendor ships the upstream change",
   "date_kind": "commit 2026-05-05",
   "note": "CERT/CC VU#410595 (2026-10-14) lists this record as accepted and under coordination; the upstream code change (commit b84dc60) is dated 2026-05-05. This does not mean every product using BoringSSL is updated.",
   "sources": [
    {
     "label": "CERT/CC VU#410595",
     "url": "https://kb.cert.org/vuls/id/410595"
    },
    {
     "label": "commit b84dc60",
     "url": "https://boringssl.googlesource.com/boringssl/+/b84dc606410ec1d8e2f779de5ec6791d2951308e"
    }
   ]
  },
  {
   "id": "boringssl-10",
   "url": "https://paperlock.org/findings/#f-boringssl-10",
   "library": "BoringSSL",
   "finding": "First-@ domain extraction in rfc822Name constraint matching. How mail applications interpret the input, and whether it is exploitable, was not established. Record VU#410595.10, legacy crypto/x509 path.",
   "status": "Disputed",
   "status_kind": "dis",
   "detail": "",
   "what_to_do": "See the vendor's position",
   "date_kind": "2026-10-14 · CERT/CC VU#410595",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#410595",
     "url": "https://kb.cert.org/vuls/id/410595"
    }
   ]
  },
  {
   "id": "boringssl-11",
   "url": "https://paperlock.org/findings/#f-boringssl-11",
   "library": "BoringSSL",
   "finding": "Trailing-dot handling in rfc822Name domains. Record VU#410595.11, newer pki path.",
   "status": "Declined by maintainer",
   "status_kind": "dis",
   "detail": "2026-02-28 · below the project's security threshold",
   "what_to_do": "See the vendor's position",
   "date_kind": "2026-10-14 · CERT/CC VU#410595",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#410595",
     "url": "https://kb.cert.org/vuls/id/410595"
    }
   ]
  },
  {
   "id": "boringssl-12",
   "url": "https://paperlock.org/findings/#f-boringssl-12",
   "library": "BoringSSL",
   "finding": "Trailing-dot DNS names were not always normalized on the legacy validation path. Record VU#410595.12, legacy crypto/x509 path.",
   "status": "Fix merged upstream",
   "status_kind": "merged",
   "detail": "commit 5774eca, 2026-03-04",
   "what_to_do": "Update when your vendor ships the upstream change",
   "date_kind": "commit 2026-03-04",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#410595",
     "url": "https://kb.cert.org/vuls/id/410595"
    },
    {
     "label": "commit 5774eca",
     "url": "https://boringssl.googlesource.com/boringssl/+/5774eca"
    }
   ]
  },
  {
   "id": "awslc-wildcard-cn",
   "url": "https://paperlock.org/findings/#f-awslc-wildcard-cn",
   "library": "AWS-LC",
   "finding": "Wildcard Common Name fallback (leaf without a dNSName SAN) could bypass Name Constraints enforcement.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "AWS-LC 1.71.0 (GHSA-3jrg-j22w-mpmc) · aws-lc-sys 0.39.0 (GHSA-394x-vwmw-crm3)",
   "what_to_do": "Update to AWS-LC 1.71.0 / aws-lc-sys 0.39.0 or later",
   "date_kind": "advisory 2026-03-19",
   "note": "",
   "sources": [
    {
     "label": "GHSA-3jrg-j22w-mpmc",
     "url": "https://github.com/aws/aws-lc/security/advisories/GHSA-3jrg-j22w-mpmc"
    },
    {
     "label": "GHSA-394x-vwmw-crm3",
     "url": "https://github.com/aws/aws-lc-rs/security/advisories/GHSA-394x-vwmw-crm3"
    },
    {
     "label": "1seal finding F-AWS-LC-NAMECONSTRAINTS-001",
     "url": "https://1seal.org/research/findings/F-AWS-LC-NAMECONSTRAINTS-001/"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "awslc-unicode-cn",
   "url": "https://paperlock.org/findings/#f-awslc-unicode-cn",
   "library": "AWS-LC",
   "finding": "Raw UTF-8 Unicode Common Name values (leaf without a dNSName SAN) could bypass Name Constraints enforcement.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "AWS-LC 1.71.0 (GHSA-3jrg-j22w-mpmc) · aws-lc-sys 0.39.0 (GHSA-394x-vwmw-crm3)",
   "what_to_do": "Update to AWS-LC 1.71.0 / aws-lc-sys 0.39.0 or later",
   "date_kind": "advisory 2026-03-19",
   "note": "CERT/CC VU#948176 (2026-10-14) lists the Unicode CN report as under coordination; AWS's advisory GHSA-3jrg-j22w-mpmc (2026-03-19) lists it as fixed.",
   "sources": [
    {
     "label": "GHSA-3jrg-j22w-mpmc",
     "url": "https://github.com/aws/aws-lc/security/advisories/GHSA-3jrg-j22w-mpmc"
    },
    {
     "label": "GHSA-394x-vwmw-crm3",
     "url": "https://github.com/aws/aws-lc-rs/security/advisories/GHSA-394x-vwmw-crm3"
    },
    {
     "label": "1seal finding F-AWS-LC-NAMECONSTRAINTS-002",
     "url": "https://1seal.org/research/findings/F-AWS-LC-NAMECONSTRAINTS-002/"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "s2n",
   "url": "https://paperlock.org/findings/#f-s2n",
   "library": "s2n-tls",
   "finding": "Reported to apply DNS constraints inconsistently when a leaf has no dNSName SAN and uses a wildcard Common Name.",
   "status": "In triage",
   "status_kind": "open",
   "detail": "",
   "what_to_do": "No fix confirmed in the cited source — test your validator against your requirements",
   "date_kind": "2026-10-14 · CERT/CC VU#948176",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "go-1",
   "url": "https://paperlock.org/findings/#f-go-1",
   "library": "Go crypto/x509",
   "finding": "Case handling in wildcard parent-constraint lookup: a wildcard SAN could escape an exclusion of a specific DNS name.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "Go 1.26.2 · CVE-2026-33810 (GO-2026-4866)",
   "what_to_do": "Update to Go 1.26.2 or later",
   "date_kind": "checked 2026-10-10",
   "note": "Co-credited to 1seal in the Go record. CERT/CC VU#948176 (2026-10-14) lists two Go reports as in triage.",
   "reproduction": "https://paperlock.org/method/#reproduce",
   "sources": [
    {
     "label": "GO-2026-4866",
     "url": "https://pkg.go.dev/vuln/GO-2026-4866"
    },
    {
     "label": "code change",
     "url": "https://go.googlesource.com/go/+/4978c2029c3ff66da8f1dfe32ac6770ce1514fe8%5E%21/"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "go-2",
   "url": "https://paperlock.org/findings/#f-go-2",
   "library": "Go crypto/x509",
   "finding": "Several exact email constraints with the same local part and different domains overwrote each other; only the last one applied.",
   "status": "Fix released in",
   "status_kind": "fixed",
   "detail": "Go 1.26.1 · CVE-2026-27137 (GO-2026-4599)",
   "what_to_do": "Update to Go 1.26.1 or later",
   "date_kind": "checked 2026-10-10",
   "note": "The public CVE record credits another researcher (Jakub Ciolek); the fix covers the same mechanism. CERT/CC VU#948176 (2026-10-14) lists two Go reports as in triage.",
   "sources": [
    {
     "label": "GO-2026-4599",
     "url": "https://pkg.go.dev/vuln/GO-2026-4599"
    },
    {
     "label": "code change",
     "url": "https://go.googlesource.com/go/+/2ebb15729599c71c4bb9ea83849315e214c81b78%5E%21/"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "go-ipv4-mapped",
   "url": "https://paperlock.org/findings/#f-go-ipv4-mapped",
   "library": "Go crypto/x509",
   "finding": "IPv4-mapped IPv6 addresses checked against IPv4 constraints.",
   "status": "Declined by maintainer",
   "status_kind": "dis",
   "detail": "not accepted as meeting the project's security bar",
   "what_to_do": "See the vendor's position",
   "date_kind": "2026-10-14 · CERT/CC VU#948176",
   "note": "The maintainer's position is about the security bar; the observed difference remains.",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "apple-uri-userinfo",
   "url": "https://paperlock.org/findings/#f-apple-uri-userinfo",
   "library": "Apple Security.framework",
   "finding": "Userinfo stayed in the extracted URI host and affected the comparison.",
   "status": "Fix mapping unconfirmed",
   "status_kind": "open",
   "detail": "submitted 2026-03-16 · public credit: macOS Tahoe 26.6",
   "what_to_do": "No fix confirmed in the cited source — test your validator against your requirements",
   "date_kind": "checked 2026-10-14",
   "note": "Apple confirmed to the researcher that the directoryName and URI reports were tracked under one internal issue and classified as a defense in depth security improvement, not a direct security vulnerability. Apple stated that exploitation requires control of a compromised subordinate CA and that no CVE would be issued. This comes from vendor correspondence supplied by the researcher. Apple’s public advisory acknowledges the researcher under Additional recognition → Security; it does not identify the mechanism, the patch or a report-specific fixed release, and the mechanism is described from the researcher's report. One shared recognized improvement, not two independent vulnerabilities; patch authorship is not claimed. CERT/CC VU#948176 (2026-10-14) lists three Apple reports submitted on 2026-03-16 as in triage; Apple's later reply to the researcher is summarised above.",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    },
    {
     "label": "Apple: macOS Tahoe 26.6 security content",
     "url": "https://support.apple.com/en-us/128067"
    }
   ]
  },
  {
   "id": "apple-3",
   "url": "https://paperlock.org/findings/#f-apple-3",
   "library": "Apple Security.framework",
   "finding": "An exact directoryName could escape an excluded subtree: the length check was stricter than equal-length matching.",
   "status": "Fix mapping unconfirmed",
   "status_kind": "open",
   "detail": "submitted 2026-03-16 · public credit: macOS Tahoe 26.6",
   "what_to_do": "No fix confirmed in the cited source — test your validator against your requirements",
   "date_kind": "checked 2026-10-14",
   "note": "Tracked by Apple under the same internal issue as the URI row above: same classification (defense in depth, no CVE) and same sources. The mechanism is described from the researcher's report, not from Apple’s public advisory. CERT/CC VU#948176 (2026-10-14) lists three Apple reports submitted on 2026-03-16 as in triage; Apple's later reply to the researcher is summarised above.",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    },
    {
     "label": "Apple: macOS Tahoe 26.6 security content",
     "url": "https://support.apple.com/en-us/128067"
    }
   ]
  },
  {
   "id": "nss-ip",
   "url": "https://paperlock.org/findings/#f-nss-ip",
   "library": "Mozilla NSS",
   "finding": "An IPv4-mapped IPv6 address checked against an IPv4 constraint.",
   "status": "Under coordination",
   "status_kind": "open",
   "detail": "",
   "what_to_do": "No fix confirmed in the cited source — test your validator against your requirements",
   "date_kind": "2026-10-14 · CERT/CC VU#948176",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "nss-uri",
   "url": "https://paperlock.org/findings/#f-nss-uri",
   "library": "Mozilla NSS",
   "finding": "URI authority: the scan for @ continued past the end of the authority (related report, per CERT/CC).",
   "status": "In triage",
   "status_kind": "open",
   "detail": "last recorded April 2026; current state not confirmed",
   "what_to_do": "No fix confirmed in the cited source — test your validator against your requirements",
   "date_kind": "historical, last recorded 2026-04",
   "note": "CERT/CC VU#948176 (2026-10-14) mentions a related NSS URI report without stating its status.",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "libressl-wildcard",
   "url": "https://paperlock.org/findings/#f-libressl-wildcard",
   "library": "LibreSSL",
   "finding": "A wildcard name checked against an exclusion of a specific DNS name.",
   "status": "Under coordination",
   "status_kind": "open",
   "detail": "",
   "what_to_do": "No fix confirmed in the cited source — test your validator against your requirements",
   "date_kind": "2026-10-14 · CERT/CC VU#948176",
   "note": "",
   "sources": [
    {
     "label": "CERT/CC VU#573195",
     "url": "https://kb.cert.org/vuls/id/573195"
    },
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  },
  {
   "id": "mbedtls-noncritical",
   "url": "https://paperlock.org/findings/#f-mbedtls-noncritical",
   "library": "Mbed TLS",
   "finding": "Non-critical Name Constraints not enforced in the reported configuration.",
   "status": "Vendor position: feature request",
   "status_kind": "dis",
   "detail": "disputed by the reporter",
   "what_to_do": "See the vendor's position",
   "date_kind": "2026-10-14 · CERT/CC VU#948176",
   "note": "Both positions: RFC 5280 requires CAs to mark the extension critical; in the tested configuration a critical extension the validator does not support makes the chain fail — a rejection, not enforcement of Name Constraints. The reporter's concern remains.",
   "sources": [
    {
     "label": "CERT/CC VU#948176",
     "url": "https://kb.cert.org/vuls/id/948176"
    }
   ]
  }
 ]
}