| Package | Affected versions | Patched versions |
|---|---|---|
| wolfssl | ≥ 4.6.0, < 4.8.0 | 4.8.0 |
wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free