Login Request a demo
BO
Product
botan
by randombit · last CVE May 27, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 3Medium 2Low 0
Severity
All severities6Critical1High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add botan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34582
9.1
0%
Apr 7
Botan has a TLS 1.3 certificate authentication bypass
Affected: < 3.11.1
CVE-2026-32877
8.2
0%
Mar 30
Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field
Affected: >= 2.3.0, < 3.11.0
CVE-2026-44378
7.5
0%
May 27
Botan: Quadratic complexity decoding BER indefinite length encodings
Affected: < 3.12.0
CVE-2026-34580
7.5
0%
Apr 7
Botan has a certificate authentication bypass due to trust anchor confusion
Affected: >= 3.11.0, < 3.11.1
CVE-2026-32883
5.9
0%
Mar 30
Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Affected: >= 3.0.0, < 3.11.0
CVE-2026-32884
5.9
0%
Mar 30
Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)
Affected: < 3.11.0
Showing 6