Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
JONASBN records in CISA KEVNo JONASBN vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00341 · Published 2026-07-13 · Fixed in 2.1.3 CWE-125
Priority LOW 39
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00309 · Published 2026-07-13 · Fixed in 2.1.3 CWE-476
