Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-12889
CVE-2025-12889
With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the CertificateRequest.
Published Nov 24, 2025
https://github.com/wolfSSL/wolfssl/pull/9395
CVSS Score
Medium
5.4
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
nuget
wolfSSL.Native
1.0.0
nuget
wolfSSL.Native
1.0.1
nuget
wolfSSL.Native
1.0.2
nuget
wolfSSL.Native
1.3.0
nuget
wolfSSL.Native
3.11.0
rpm
wolfssl
5.7.0-1.el9
rpm
wolfssl
5.7.2-2.el9
rpm
wolfssl-debugsource
5.7.0-1.el9
rpm
wolfssl-debugsource
5.7.2-2.el9
rpm
wolfssl-devel
5.7.0-1.el9
rpm
wolfssl-devel
5.7.2-2.el9
rpm
wolfssl-doc
5.7.0-1.el9
rpm
wolfssl-doc
5.7.2-2.el9
1-13 of 13
CVE-2025-12889 | Components Impacted | Sonatype Guide | Sonatype Guide
