What is GHSA-9mfx-g534-q3pc?

GHSA-9mfx-g534-q3pc is a security advisory published by GitHub Security Advisories with Critical severity. Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates...

Which CVE IDs does GHSA-9mfx-g534-q3pc cover?

GHSA-9mfx-g534-q3pc covers the following CVE IDs: CVE-2026-95210. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9mfx-g534-q3pc?

GHSA-9mfx-g534-q3pc has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-9mfx-g534-q3pcCriticalCVSS 9.1

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

November 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-95210 →

📋 Description

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-95210
https://gist.github.com/lkloliver/4aad23689202720c4068f43b3c6069c7
http://gnutls.com
https://github.com/lkloliver/poc/tree/main/CVE-2026-95210
https://gitlab.com/gnutls/gnutls/-/blob/e2169a87c7fb91935c2845088204b102baed4c5f/SECURITY.md
https://gitlab.com/gnutls/gnutls/-/work_items/1965
https://github.com/advisories/GHSA-9mfx-g534-q3pc