Product by Randombit
Randombit Botan
15 known vulnerabilities in Randombit Botan (Randombit), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-118769 | Botan: Integer overflow when reporting block size in FFI can cause memory corruption | — | |
| Critical | CVE-2026-34580 | Botan has a certificate authentication bypass due to trust anchor confusion | 7.5 | |
| Critical | CVE-2017-2801 | Randombit Botan: security vulnerability | 6.5 | |
| High | CVE-2026-118765 | Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state | — | |
| Critical | CVE-2026-34582 | Botan has a TLS 1.3 certificate authentication bypass | 9.1 | |
| High | CVE-2026-44378 | Botan: Quadratic complexity decoding BER indefinite length encodings | 7.5 | |
| Medium | CVE-2026-118766 | Botan: Online OCSP redirects enable blind requests to internal HTTP services | 6.1 | |
| High | CVE-2026-32877 | Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field | 8.2 | |
| Medium | CVE-2026-118768 | Botan: CLI utility `ocsp_check` accepts unauthenticated responses | — | |
| Medium | CVE-2024-34702 | Botan has a Denial of Service Due to Excessive Name Constraints | 5.3 | |
| High | CVE-2024-34703 | Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters | 7.5 | |
| Medium | CVE-2026-118767 | Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs | 4.8 | |
| Medium | CVE-2026-32883 | Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass | 5.9 | |
| Medium | CVE-2026-32884 | Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) | 5.9 | |
| Medium | CVE-2024-39312 | Botan has an Authorization Error due to Name Constraint Decoding Bug | 5.3 |