This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-109144 →
DEBIAN-CVE-2026-109144
A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Build...
Original description
The description as published by the source.
A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:13
python-certvalidator
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
python-certvalidator
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
References
- advisory security-tracker.debian.org