CRITICAL9.8CVE-2021-24115In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and h… from 0, < 2.17.3+dfsg-1
CRITICAL9.1CVE-2022-43705In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. from 0
HIGH8.8CVE-2026-35582Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix from 0
HIGH8.2Botan is a C++ cryptography library.
from 0
HIGH7.5Botan is a C++ cryptography library.
from 0
MEDIUM5.9Botan is a C++ cryptography library.
from 0
MEDIUM5.9Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna1…
from 0
MEDIUM5.9Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in…
from 0
MEDIUM5.9The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during in…
from 0
MEDIUM5.9A side-channel issue was discovered in Botan before 2.9.0.
from 0, < 2.9.0-2
MEDIUM5.3Botan is a C++ cryptography library.
from 0