octorpki — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in octorpki, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2021-3978	Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki CWE-269	7.5	High	2025-01-29
CVE-2022-3616	OctoRPKI crash when maximum iterations number is reached CWE-754	5.4	Medium	2022-10-28
CVE-2021-3912	OctoRPKI crashes when processing GZIP bomb returned via malicious repository CWE-400	4.2	Medium	2021-11-11
CVE-2021-3911	Misconfigured IP address field in ROA leads to OctoRPKI crash CWE-20	4.2	Medium	2021-11-11
CVE-2021-3910	NUL character in ROA causes OctoRPKI to crash CWE-20	4.4	Medium	2021-11-11
CVE-2021-3909	Infinite open connection causes OctoRPKI to hang forever CWE-400	4.4	Medium	2021-11-11
CVE-2021-3908	Infinite certificate chain depth results in OctoRPKI running forever CWE-400	5.9	Medium	2021-11-11
CVE-2021-3907	Arbitrary filepath traversal via URI injection CWE-20	7.4	High	2021-11-11
CVE-2021-3761	OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values	7.5	High	2021-09-09

All 9 known CVE vulnerabilities affecting octorpki with full Chinese analysis, references, and POCs where available.