GHSA-g5gj-9ggf-9vmq
Infinite certificate chain depth results in OctoRPKI running forever
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/cloudflare/cfrpki | < 1.4.0 | 1.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
OctoRPKI (github.com/cloudflare/cfrpki/cmd/octorpki) does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.
### For more information
If you have any questions or comments about this advisory email us at [email protected]
References
External links from the advisory. They lead to third-party sites.