DirectorySecurity AdvisoriesPricing
/
Sign in
Security Advisories

GHSA-xphf-cx8h-7q9g

https://github.com/advisories/GHSA-xphf-cx8h-7q9g

Severity

Unknown
Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

Summary

openssl X509StoreRef::objects is unsound

Description

This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind one's back.

Use of this function should be replaced with X509StoreRef::all_certificates.

References

  • https://github.com/advisories/GHSA-xphf-cx8h-7q9g

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing