rfc3161-client vulnerabilities

2 known vulnerabilities in rfc3161-client from Trailofbits. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  rfc3161-client: Improper Certificate Validation

  CVE-2026-33753Apr 8, 2026Trailofbits

  rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Auth

• 9.3 Critical severity

  rfc3161-client: Improper Verification of Cryptographic Signature

  CVE-2025-52556Jun 21, 2025Trailofbits

  rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR'