← All credits

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

18 vulnerability records and advisories credit this contributor.

URI name constraints checked against a mis-parsed host

Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix

Unbounded PBE iteration count when decrypting PKCS#8 private keys

Unbounded allocation from OpenPGP signature and user attribute subpacket lengths

Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap

Attribute certificate path validation does not verify the attribute certificate's signature

Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links

MTI/A0 DHAgreement does not validate the peer's ephemeral value

Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion

IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)