CVE-2026-42508

[opensourceways-bot]

一、漏洞信息
漏洞编号：CVE-2026-42508
漏洞归属组件：crypto
漏洞归属分支：默认分支
漏洞归属的版本：v0.45.0
漏洞修复版本: 0.52.0
CVSS分值：
 BaseScore： 7.4 High
 Vector： CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

漏洞简述：
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @Revoked.

漏洞公开时间：2026-05-22 04:16:25
漏洞创建时间：2026-06-24 02:55:18
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-42508

[opensourceways-bot]

Welcome To opensourceways Community

Hey @opensourceways-bot , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: infratructure ,
and any of the maintainers: @GeorgeCao-hw, @TangJia025, @pkking, @zhongjun2 ,
and any of the committers: @JavaPythonAIForBAT, @Zherphy, @tfhddd, @zhongjun2 .