# Maintainer harvest recipes. CI does not fetch these.
# A recipe without parent+commit is advisory-only and must be rejected.
# year/cwe/class/sink/evidence drive catalog.toml and training/manifest.jsonl.

[[recipe]]
name = "openssl-cve-2014-0160"
host = "github"
repo = "openssl/openssl"
parent = "0d7717fc9c83dafab8153cbd5e2180e6e04cc802"
commit = "96db9023b881d7cd9f379b0c154650d6c108e9a3"
path = "ssl/t1_lib.c"
function = "tls1_process_heartbeat"
cve = "CVE-2014-0160"
year = 2014
license = "OpenSSL License"
relpath = "ssl/t1_lib.c"
language = "c"
cwe = "CWE-126"
class = "buffer over-read"
rule_id = "c-unsafe-memory-copy"
sink = "memcpy"
evidence = "memcpy copies heartbeat payload using an attacker-controlled length"
commit_url = "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "firefox-cve-2020-15667"
host = "phabricator"
repo = "mozilla-central"
parent = "0c0f777161a9499dd149853ff62d356f75d16c2a"
commit = "b79b6cc78248eea7fda10bfb76aa273c19c9fa65"
path = "modules/libmar/src/mar_read.c"
function = "mar_insert_item"
cve = "CVE-2020-15667"
year = 2020
license = "MPL-2.0"
relpath = "modules/libmar/src/mar_read.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
rule_id = "c-unsafe-memory-copy"
sink = "memcpy"
evidence = "memcpy copies a MAR index name using a signed namelen that can wrap"
commit_url = "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65"
origin = "mozilla-central"
project = "firefox"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "chromium-cve-2019-5786"
host = "github"
repo = "chromium/chromium"
parent = "9f3fccdba567f30ea39b08f57d8d5b49cd832b4a"
commit = "ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449"
path = "third_party/blink/renderer/core/fileapi/file_reader_loader.cc"
function = "ArrayBufferResult"
cve = "CVE-2019-5786"
year = 2019
license = "BSD-3-Clause"
relpath = "third_party/blink/renderer/core/fileapi/file_reader_loader.cc"
language = "cpp"
cwe = "CWE-416"
class = "use after free"
rule_id = "c-unsafe-memory-copy"
sink = "ToArrayBuffer"
evidence = "ArrayBufferResult can return two references to the same underlying ArrayBuffer"
commit_url = "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449"
origin = "chromium"
project = "chromium"
mechanism = "uaf"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2020-1967"
host = "github"
repo = "openssl/openssl"
parent = "3656c08ab4b1b892730cb5e808b6f4298b08a2e6"
commit = "a87f3fe01a5a894aa27ccd6a239155fd129988e4"
path = "ssl/t1_lib.c"
function = "tls1_check_sig_alg"
cve = "CVE-2020-1967"
year = 2020
license = "OpenSSL License"
relpath = "ssl/t1_lib.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "tls1_check_sig_alg"
evidence = "SSL_check_chain / tls1_check_sig_alg can dereference NULL in TLS 1.3"
commit_url = "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2020-1971"
host = "github"
repo = "openssl/openssl"
parent = "198b11683568452282bd48828fcf60d4835bf327"
commit = "b33c48b75aaf33c93aeda42d7138616b9e6a64cb"
path = "crypto/x509/v3_genn.c"
function = "GENERAL_NAME_cmp"
cve = "CVE-2020-1971"
year = 2020
license = "OpenSSL License"
relpath = "crypto/x509/v3_genn.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "GENERAL_NAME_cmp"
evidence = "GENERAL_NAME_cmp mishandles EdiPartyName comparison"
commit_url = "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-23840"
host = "github"
repo = "openssl/openssl"
parent = "c1ddd392cf9737c09c1f9bf690adfbe596403c5e"
commit = "c9fb704cf3af5524eb8e79961e31b60eee8c3c47"
path = "crypto/evp/evp_enc.c"
function = "evp_EncryptDecryptUpdate"
cve = "CVE-2021-23840"
year = 2021
license = "OpenSSL License"
relpath = "crypto/evp/evp_enc.c"
language = "c"
cwe = "CWE-190"
class = "integer overflow"
sink = "EVP_CipherUpdate"
evidence = "EVP_CipherUpdate output length can overflow"
commit_url = "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47"
origin = "openssl"
project = "openssl"
mechanism = "signed_size_operand"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3711"
host = "github"
repo = "openssl/openssl"
parent = "8c74c9d1ade0fbdab5b815ddb747351b8b839641"
commit = "59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
path = "crypto/sm2/sm2_crypt.c"
function = "sm2_plaintext_size"
cve = "CVE-2021-3711"
year = 2021
license = "OpenSSL License"
relpath = "crypto/sm2/sm2_crypt.c"
language = "c"
cwe = "CWE-120"
class = "buffer overflow"
sink = "sm2_decrypt"
evidence = "SM2 plaintext size is underestimated so the second EVP_PKEY_decrypt overflows"
commit_url = "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3712"
host = "github"
repo = "openssl/openssl"
parent = "1f365708a3318a5f1a395f90c38b584a58d37fb9"
commit = "98624776c4d501c8badd6f772ab7048ac9191cb9"
path = "crypto/x509/v3_utl.c"
function = "append_ia5"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/v3_utl.c"
language = "c"
cwe = "CWE-125"
class = "buffer over-read"
sink = "append_ia5"
evidence = "append_ia5 assumes NUL-terminated ASN.1 strings"
commit_url = "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-0778"
host = "github"
repo = "openssl/openssl"
parent = "1832bb0f02e519a48f06a10467c7ce5f7f3feeeb"
commit = "9eafb53614bf65797db25f467946e735e1b43dc9"
path = "crypto/bn/bn_sqrt.c"
function = "BN_mod_sqrt"
cve = "CVE-2022-0778"
year = 2022
license = "Apache-2.0"
relpath = "crypto/bn/bn_sqrt.c"
language = "c"
cwe = "CWE-835"
class = "infinite loop"
sink = "BN_mod_sqrt"
evidence = "BN_mod_sqrt can loop forever on crafted moduli"
commit_url = "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-1292"
host = "github"
repo = "openssl/openssl"
parent = "7d56a74a96828985db7354a55227a511615f732b"
commit = "1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2"
path = "tools/c_rehash.in"
function = "link_hash_cert"
cve = "CVE-2022-1292"
year = 2022
license = "Apache-2.0"
relpath = "tools/c_rehash.in"
language = "perl"
cwe = "CWE-78"
class = "command injection"
sink = "backtick"
evidence = "c_rehash interpolates certificate filenames into a shell backtick command"
commit_url = "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2"
origin = "openssl"
project = "openssl"
mechanism = "source_reaches_sink"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-3602"
host = "github"
repo = "openssl/openssl"
parent = "89d72311327735ef15c804d2adea84a0fb1bfa0a"
commit = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
cve = "CVE-2022-3602"
year = 2022
license = "Apache-2.0"
relpath = "crypto/punycode.c"
language = "c"
cwe = "CWE-787"
class = "buffer overflow"
sink = "ossl_punycode_decode"
evidence = "punycode decoder can write past the output buffer"
commit_url = "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-3786"
host = "github"
repo = "openssl/openssl"
parent = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
commit = "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
cve = "CVE-2022-3786"
year = 2022
license = "Apache-2.0"
relpath = "crypto/punycode.c"
language = "c"
cwe = "CWE-787"
class = "buffer overflow"
sink = "ossl_punycode_decode"
evidence = "punycode decoder can overflow a stack buffer via a crafted email name"
commit_url = "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-0286"
host = "github"
repo = "openssl/openssl"
parent = "adf77d6657e836fc87391fad53d857927a764297"
commit = "7880536fe17c2b5450e279155bedd51771d28c9f"
path = "crypto/x509/v3_genn.c"
function = "GENERAL_NAME_cmp"
cve = "CVE-2023-0286"
year = 2023
license = "Apache-2.0"
relpath = "crypto/x509/v3_genn.c"
language = "c"
cwe = "CWE-843"
class = "type confusion"
sink = "GENERAL_NAME_cmp"
evidence = "GENERAL_NAME_cmp type-confuses x400Address"
commit_url = "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f"
origin = "openssl"
project = "openssl"
mechanism = "type_confusion"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2023-38545"
host = "github"
repo = "curl/curl"
parent = "09e25b9d94f4106eac8ca3a43b221bdc66f405e4"
commit = "fb4415d8aee6c1045be932a34fe6107c2f5ed147"
path = "lib/socks.c"
function = "do_SOCKS5"
cve = "CVE-2023-38545"
year = 2023
license = "curl"
relpath = "lib/socks.c"
language = "c"
cwe = "CWE-122"
class = "heap buffer overflow"
rule_id = "c-unsafe-memory-copy"
sink = "memcpy"
evidence = "SOCKS5 remote-resolve copies a hostname that can exceed the local buffer"
commit_url = "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147"
origin = "curl"
project = "curl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "chromium-cve-2022-2162"
host = "github"
repo = "chromium/chromium"
parent = "a07d0ae0a7dc68686adca10dcf11138cb2f4ab6d"
commit = "22c61cfae5d1b37c773e638d342488ae11118b51"
path = "content/browser/file_system_access/file_system_chooser.cc"
function = "IsShellIntegratedExtension"
cve = "CVE-2022-2162"
year = 2022
license = "BSD-3-Clause"
relpath = "content/browser/file_system_access/file_system_chooser.cc"
language = "cpp"
cwe = "CWE-20"
class = "insufficient input validation"
sink = "IsShellIntegratedExtension"
evidence = "File System Access suggested names did not sanitize Windows .url shell extensions"
commit_url = "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51"
origin = "chromium"
project = "chromium"
mechanism = "validation_strength"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-69421"
host = "github"
repo = "openssl/openssl"
parent = "ea8fc4c345fbd749048809c9f7c881ea656b0b94"
commit = "2c13bf15286328641a805eb3b7c97e27d42881fb"
path = "crypto/pkcs12/p12_decr.c"
function = "PKCS12_item_decrypt_d2i_ex"
cve = "CVE-2025-69421"
year = 2025
license = "Apache-2.0"
relpath = "crypto/pkcs12/p12_decr.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "PKCS12_item_decrypt_d2i_ex"
evidence = "PKCS12_item_decrypt_d2i_ex did not check a NULL oct argument"
commit_url = "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-66199"
host = "github"
repo = "openssl/openssl"
parent = "b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f"
commit = "84f73f79af9f69c1527a9a372b7a9e771a394c2a"
path = "ssl/statem/statem_lib.c"
function = "tls13_process_compressed_certificate"
cve = "CVE-2025-66199"
year = 2025
license = "Apache-2.0"
relpath = "ssl/statem/statem_lib.c"
language = "c"
cwe = "CWE-770"
class = "uncontrolled allocation"
sink = "tls13_process_compressed_certificate"
evidence = "TLS 1.3 compressed certificate length was trusted before allocation"
commit_url = "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_alloc_size"
provenance = "human"
split = "train"

[[recipe]]
name = "firefox-bug-2058173"
host = "github"
repo = "mozilla-firefox/firefox"
parent = "eed0931f85474d0db6e2326dfd9718c6bf1cd418"
commit = "e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6"
path = "modules/libmar/src/mar_read.c"
function = "mar_read_index"
cve = "BUG-2058173"
year = 2026
license = "MPL-2.0"
relpath = "modules/libmar/src/mar_read.c"
language = "c"
cwe = "CWE-770"
class = "uncontrolled allocation"
sink = "malloc"
evidence = "mar_read_index malloc'd an untrusted MAR index size with no upper bound"
commit_url = "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6"
origin = "mozilla-firefox/firefox"
project = "firefox"
mechanism = "unchecked_alloc_size"
provenance = "human"
split = "train"

# --- auto-harvested 2020-2026 (local git mine) ---

[[recipe]]
name = "openssl-cve-2026-18798"
host = "github"
repo = "openssl/openssl"
parent = "48f5785425ee6b5316f8e5f921978397ba632cc6"
commit = "70cebd74d3592f5272945501b58a60374c4e13af"
path = "ssl/quic/quic_port.c"
function = "port_default_packet_handler"
cve = "CVE-2026-18798"
year = 2026
license = "Apache-2.0"
relpath = "ssl/quic/quic_port.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Avoid double free of qrx in port_default_packet_handler()"
commit_url = "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-54874"
host = "github"
repo = "openssl/openssl"
parent = "a0c8ec557d9cac078f032d76cdf684fe743eb382"
commit = "1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
path = "ssl/record/rec_layer_d1.c"
function = "DTLS_RECORD_LAYER_clear"
cve = "CVE-2026-54874"
year = 2026
license = "Apache-2.0"
relpath = "ssl/record/rec_layer_d1.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Avoid full read buffer allocation when buffering DTLS records"
commit_url = "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-54874-dtls1_process_record"
host = "github"
repo = "openssl/openssl"
parent = "a0c8ec557d9cac078f032d76cdf684fe743eb382"
commit = "1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
path = "ssl/record/ssl3_record.c"
function = "dtls1_process_record"
cve = "CVE-2026-54874"
year = 2026
license = "Apache-2.0"
relpath = "ssl/record/ssl3_record.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Avoid full read buffer allocation when buffering DTLS records"
commit_url = "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-54874-dtls_rlayer_buffer_recor"
host = "github"
repo = "openssl/openssl"
parent = "9ec2f6d2ae2bcad907cf7ee38584855bafe4979a"
commit = "7110cb2f75806d0bf809eb2f90790d477900be40"
path = "ssl/record/methods/dtls_meth.c"
function = "dtls_rlayer_buffer_record"
cve = "CVE-2026-54874"
year = 2026
license = "Apache-2.0"
relpath = "ssl/record/methods/dtls_meth.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Avoid full read buffer allocation when buffering DTLS next-epoch records"
commit_url = "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-63072"
host = "github"
repo = "openssl/openssl"
parent = "d307f61f1b341b6eb7d5d07bd6902a939c709bc6"
commit = "a0c8ec557d9cac078f032d76cdf684fe743eb382"
path = "crypto/cms/cms_kari.c"
function = "cms_kek_cipher"
cve = "CVE-2026-63072"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_kari.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap"
commit_url = "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-63072-cms_kek_cipher"
host = "github"
repo = "openssl/openssl"
parent = "1951c3cbd9d5101e027a1eb126f26c3c758f6cc0"
commit = "2a3dac874c8057c1f0186849bf1ede1ae7b6b756"
path = "crypto/cms/cms_kemri.c"
function = "cms_kek_cipher"
cve = "CVE-2026-63072"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_kemri.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap"
commit_url = "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-63073"
host = "github"
repo = "openssl/openssl"
parent = "1e8c398db67404babd3e5af999bb6bd86f720c76"
commit = "a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4"
path = "crypto/cmp/cmp_vfy.c"
function = "ossl_cmp_msg_check_update"
cve = "CVE-2026-63073"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cmp/cmp_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "CMP unexpected sender DN used as format string in ERR_raise_data()"
commit_url = "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-14457"
host = "github"
repo = "openssl/openssl"
parent = "f636f9ca0fa1bae5b42f9e787f025c96fb09c43a"
commit = "1e8c398db67404babd3e5af999bb6bd86f720c76"
path = "ssl/t1_lib.c"
function = "check_cert_usable"
cve = "CVE-2026-14457"
year = 2026
license = "Apache-2.0"
relpath = "ssl/t1_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Handle signature_algorithms_cert extension in key-only context"
commit_url = "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-63074"
host = "github"
repo = "openssl/openssl"
parent = "9f2b8522d39ff869fac2ff7c3f20609b54843188"
commit = "21a5d9658b0c66daace60e10ea18ff32a448de9f"
path = "crypto/cmp/cmp_vfy.c"
function = "ossl_cmp_msg_check_update"
cve = "CVE-2026-63074"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cmp/cmp_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix unbounded cert cache growth in cmp"
commit_url = "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-63075-txp_pkt_commit"
host = "github"
repo = "openssl/openssl"
parent = "a1f348ccb328c3afbd4ba6883f9b7c813c043259"
commit = "c902e5f16d6a9e130e96d3ca6d8f64d71652e393"
path = "ssl/quic/quic_txp.c"
function = "txp_pkt_commit"
cve = "CVE-2026-63075"
year = 2026
license = "Apache-2.0"
relpath = "ssl/quic/quic_txp.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Don't store ACK-only frames in TX history for QUIC."
commit_url = "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-75803"
host = "github"
repo = "openssl/openssl"
parent = "39488cb863074d5b8ece833905f7ad2b357d44fe"
commit = "119ab9555dc62275bbd71f6f49529b1a44feba42"
path = "providers/implementations/ciphers/cipher_aes_ocb.c"
function = "aes_ocb_cipher"
cve = "CVE-2026-75803"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_aes_ocb.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs"
commit_url = "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-75803-chacha20_poly1305_cipher"
host = "github"
repo = "openssl/openssl"
parent = "39488cb863074d5b8ece833905f7ad2b357d44fe"
commit = "119ab9555dc62275bbd71f6f49529b1a44feba42"
path = "providers/implementations/ciphers/cipher_chacha20_poly1305.c"
function = "chacha20_poly1305_cipher"
cve = "CVE-2026-75803"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_chacha20_poly1305.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs"
commit_url = "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-75803-aes_gcm_siv_finish"
host = "github"
repo = "openssl/openssl"
parent = "de7d1871087fc1fa3e2c1db4b11275b68d72f416"
commit = "bf95f5f772e9362f87b25cfa2f8cb15d984865b9"
path = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
function = "aes_gcm_siv_finish"
cve = "CVE-2026-75803"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs"
commit_url = "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-14456-port_default_packet_hand"
host = "github"
repo = "openssl/openssl"
parent = "2dacccc943b47b8dc1ce8f7109c9852391b5a0d8"
commit = "08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
path = "ssl/quic/quic_port.c"
function = "port_default_packet_handler"
cve = "CVE-2026-14456"
year = 2026
license = "Apache-2.0"
relpath = "ssl/quic/quic_port.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "QUIC server: limit number of pending QUIC channels/connections"
commit_url = "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-14456-expect_quic_for_value"
host = "github"
repo = "openssl/openssl"
parent = "2c9a078b6030444ed868a3943991f42b35cd49dc"
commit = "9416706d408bb84deb7cee4647bff3045d2dc7ba"
path = "ssl/quic/quic_impl.c"
function = "expect_quic_for_value"
cve = "CVE-2026-14456"
year = 2026
license = "Apache-2.0"
relpath = "ssl/quic/quic_impl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "QUIC server: limit number of pending QUIC channels/connections"
commit_url = "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-45447"
host = "github"
repo = "openssl/openssl"
parent = "609bcb24866d64f1fc49d38b852edbb39057d721"
commit = "f4129fbe3cde786d363510069fe297234f99be8f"
path = "crypto/pkcs7/pk7_smime.c"
function = "PKCS7_verify"
cve = "CVE-2026-45447"
year = 2026
license = "Apache-2.0"
relpath = "crypto/pkcs7/pk7_smime.c"
language = "c"
cwe = "CWE-416"
class = "use after free"
sink = "free"
evidence = "Fix possible use-after-free in OpenSSL PKCS7_verify()"
commit_url = "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f"
origin = "openssl"
project = "openssl"
mechanism = "uaf"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-45446"
host = "github"
repo = "openssl/openssl"
parent = "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
commit = "609bcb24866d64f1fc49d38b852edbb39057d721"
path = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
function = "aes_gcm_siv_initkey"
cve = "CVE-2026-45446"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV"
commit_url = "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-45446-aes_siv_set_ctx_params"
host = "github"
repo = "openssl/openssl"
parent = "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
commit = "609bcb24866d64f1fc49d38b852edbb39057d721"
path = "providers/implementations/ciphers/cipher_aes_siv.c"
function = "aes_siv_set_ctx_params"
cve = "CVE-2026-45446"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_aes_siv.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV"
commit_url = "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-45445"
host = "github"
repo = "openssl/openssl"
parent = "5f489043b662fed32fbf7eb7442c479568eb43fd"
commit = "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
path = "providers/implementations/ciphers/cipher_aes_ocb.c"
function = "aes_ocb_cipher"
cve = "CVE-2026-45445"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_aes_ocb.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Apply the buffered IV on the AES-OCB EVP_Cipher() path"
commit_url = "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-42771"
host = "github"
repo = "openssl/openssl"
parent = "0f3fab2eccc7c3417093a8243dd15d95b6cb472d"
commit = "b3a555a0a7aa0028887149f6f973af89a4937bea"
path = "crypto/x509/x509_vpm.c"
function = "validate_hostname_part"
cve = "CVE-2026-42771"
year = 2026
license = "Apache-2.0"
relpath = "crypto/x509/x509_vpm.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix length miscalculation in validate_email"
commit_url = "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-42769"
host = "github"
repo = "openssl/openssl"
parent = "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
commit = "c2765d53c2649b56bc1ca1bb799e42002953056a"
path = "crypto/cmp/cmp_genm.c"
function = "selfsigned_verify_cb"
cve = "CVE-2026-42769"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cmp/cmp_genm.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Use the correct issuer when validating rootCAKeyUpdate"
commit_url = "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-42768"
host = "github"
repo = "openssl/openssl"
parent = "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b"
commit = "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
path = "crypto/cms/cms_env.c"
function = "cms_RecipientInfo_ktri_decrypt"
cve = "CVE-2026-42768"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_env.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Enforce implicit rejection for CMS/PKCS#7 decryption"
commit_url = "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-42768-pkcs7_decrypt_rinfo"
host = "github"
repo = "openssl/openssl"
parent = "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b"
commit = "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
path = "crypto/pkcs7/pk7_doit.c"
function = "pkcs7_decrypt_rinfo"
cve = "CVE-2026-42768"
year = 2026
license = "Apache-2.0"
relpath = "crypto/pkcs7/pk7_doit.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Enforce implicit rejection for CMS/PKCS#7 decryption"
commit_url = "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-42766"
host = "github"
repo = "openssl/openssl"
parent = "a9af3442290e8a04706a3cd5f284ffd5b486e3f6"
commit = "74245170b5a64b234ac4af27c86a25ec251c8b2a"
path = "crypto/cms/cms_pwri.c"
function = "ossl_cms_RecipientInfo_pwri_crypt"
cve = "CVE-2026-42766"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_pwri.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix potential NULL dereference processing CMS PasswordRecipientInfo"
commit_url = "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-42765"
host = "github"
repo = "openssl/openssl"
parent = "5097ec4dae239112498abb722e255ea60ef7ac48"
commit = "a9af3442290e8a04706a3cd5f284ffd5b486e3f6"
path = "crypto/x509/x509_vfy.c"
function = "check_revocation"
cve = "CVE-2026-42765"
year = 2026
license = "Apache-2.0"
relpath = "crypto/x509/x509_vfy.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL Dereference in Certificate Verification with OCSP Checking"
commit_url = "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-42764"
host = "github"
repo = "openssl/openssl"
parent = "58633b658fe74095c8cdde191e4ce1bf94f8c5f9"
commit = "5097ec4dae239112498abb722e255ea60ef7ac48"
path = "ssl/quic/quic_port.c"
function = "port_default_packet_handler"
cve = "CVE-2026-42764"
year = 2026
license = "Apache-2.0"
relpath = "ssl/quic/quic_port.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL dereference in QUIC address validation"
commit_url = "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-35188"
host = "github"
repo = "openssl/openssl"
parent = "68ef88913e321bdb47eee88118ceba18ed2388cd"
commit = "58633b658fe74095c8cdde191e4ce1bf94f8c5f9"
path = "crypto/x509/x509_vfy.c"
function = "check_cert_ocsp_resp"
cve = "CVE-2026-35188"
year = 2026
license = "Apache-2.0"
relpath = "crypto/x509/x509_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix Double-free When Checking OCSP Stapled Response"
commit_url = "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-34181"
host = "github"
repo = "openssl/openssl"
parent = "fcb23806047f5afbe55d5d601a527fc24bf7ca2c"
commit = "5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c"
path = "crypto/pkcs12/p12_mutl.c"
function = "PBMAC1_PBKDF2_HMAC"
cve = "CVE-2026-34181"
year = 2026
license = "Apache-2.0"
relpath = "crypto/pkcs12/p12_mutl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "pkcs12: verify that the pbmac1 key length is safe"
commit_url = "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-9076"
host = "github"
repo = "openssl/openssl"
parent = "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9"
commit = "51d1800e95283a8beec85152e35e3634dab8dd82"
path = "crypto/cms/cms_pwri.c"
function = "kek_unwrap_key"
cve = "CVE-2026-9076"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_pwri.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "cms: kek_unwrap_key: Fix out-of-bounds read in check-byte validation"
commit_url = "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-7383"
host = "github"
repo = "openssl/openssl"
parent = "cb005ceaaf1fb50722e0101762a3e266338c5bf9"
commit = "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9"
path = "crypto/asn1/a_mbstr.c"
function = "ASN1_mbstring_ncopy"
cve = "CVE-2026-7383"
year = 2026
license = "Apache-2.0"
relpath = "crypto/asn1/a_mbstr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Reject oversized inputs in ASN1_mbstring_ncopy()"
commit_url = "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-31790"
host = "github"
repo = "openssl/openssl"
parent = "a91e537d16d74050dbde50bb0dfb1fe9930f0521"
commit = "eed200f58cd8645ed77e46b7e9f764e284df379e"
path = "providers/implementations/kem/rsa_kem.c"
function = "rsasve_generate"
cve = "CVE-2026-31790"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/kem/rsa_kem.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "rsa_kem: validate RSA_public_encrypt() result in RSASVE"
commit_url = "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-31790-rsasve_generate"
host = "github"
repo = "openssl/openssl"
parent = "a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
commit = "abd8b2eec7e3f3fda60ecfb68498b246b52af482"
path = "providers/implementations/kem/rsa_kem.c.in"
function = "rsasve_generate"
cve = "CVE-2026-31790"
year = 2026
license = "Apache-2.0"
relpath = "providers/implementations/kem/rsa_kem.c.in"
language = "perl"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "rsa_kem: validate RSA_public_encrypt() result in RSASVE"
commit_url = "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-31789"
host = "github"
repo = "openssl/openssl"
parent = "b7ae7a093997b5cd549bc21cccd715510fef86c0"
commit = "a91e537d16d74050dbde50bb0dfb1fe9930f0521"
path = "crypto/o_str.c"
function = "buf2hexstr_sep"
cve = "CVE-2026-31789"
year = 2026
license = "Apache-2.0"
relpath = "crypto/o_str.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Avoid possible buffer overflow in buf2hex conversion"
commit_url = "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-28388"
host = "github"
repo = "openssl/openssl"
parent = "d044f9252fe9a54001986fb4eb4e32076a056527"
commit = "59c3b3158553ab53275bbbccca5cb305d591cf2e"
path = "crypto/x509/x509_vfy.c"
function = "check_delta_base"
cve = "CVE-2026-28388"
year = 2026
license = "Apache-2.0"
relpath = "crypto/x509/x509_vfy.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL Dereference When Delta CRL Lacks CRL Number Extension"
commit_url = "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-28389"
host = "github"
repo = "openssl/openssl"
parent = "6e74b1275cbc1fd1cf7ba32f662602d68501f6ca"
commit = "af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
path = "crypto/cms/cms_rsa.c"
function = "rsa_cms_decrypt"
cve = "CVE-2026-28389"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_rsa.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL deref in rsa_cms_decrypt"
commit_url = "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-28389-dh_cms_set_shared_info"
host = "github"
repo = "openssl/openssl"
parent = "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9"
commit = "7b5274e812400cacb6f3be4c2df5340923fa807f"
path = "crypto/cms/cms_dh.c"
function = "dh_cms_set_shared_info"
cve = "CVE-2026-28389"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_dh.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL deref in [ec]dh_cms_set_shared_info"
commit_url = "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2026-28389-ecdh_cms_set_shared_info"
host = "github"
repo = "openssl/openssl"
parent = "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9"
commit = "7b5274e812400cacb6f3be4c2df5340923fa807f"
path = "crypto/cms/cms_ec.c"
function = "ecdh_cms_set_shared_info"
cve = "CVE-2026-28389"
year = 2026
license = "Apache-2.0"
relpath = "crypto/cms/cms_ec.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL deref in [ec]dh_cms_set_shared_info"
commit_url = "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2026-2673"
host = "github"
repo = "openssl/openssl"
parent = "21d525dc846aed171fc886f3da614a6645948f13"
commit = "85977e013f32ceb96aa034c0e741adddc1a05e34"
path = "ssl/t1_lib.c"
function = "gid_cb"
cve = "CVE-2026-2673"
year = 2026
license = "Apache-2.0"
relpath = "ssl/t1_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix group tuple handling in DEFAULT expansion"
commit_url = "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2025-69419"
host = "github"
repo = "openssl/openssl"
parent = "7565bb46fa2979511cb27aad1c2bd6b80adf7352"
commit = "4191043c36f1a50c717a2d0075fc6f3b9bc0afc5"
path = "crypto/pkcs12/p12_utl.c"
function = "bmp_to_utf8"
cve = "CVE-2025-69419"
year = 2025
license = "Apache-2.0"
relpath = "crypto/pkcs12/p12_utl.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Alternate fix for CVE-2025-69419"
commit_url = "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2025-69418"
host = "github"
repo = "openssl/openssl"
parent = "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"
commit = "52d23c86a54adab5ee9f80e48b242b52c4cc2347"
path = "crypto/modes/ocb128.c"
function = "CRYPTO_ocb128_encrypt"
cve = "CVE-2025-69418"
year = 2025
license = "Apache-2.0"
relpath = "crypto/modes/ocb128.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix OCB AES-NI/HW stream path unauthenticated/unencrypted trailing bytes"
commit_url = "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-66199-tls13_process_compressed"
host = "github"
repo = "openssl/openssl"
parent = "384011202af92605d926fafe4a0bcd6b65d162ad"
commit = "3ed1f75249932b155eef993a8e66a99cb98bfef4"
path = "ssl/statem/statem_lib.c"
function = "tls13_process_compressed_certificate"
cve = "CVE-2025-66199"
year = 2025
license = "Apache-2.0"
relpath = "ssl/statem/statem_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Check the received uncompressed certificate length to prevent excessive pre-decompression allocation."
commit_url = "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-68160"
host = "github"
repo = "openssl/openssl"
parent = "e0666f72294691a808443970b654412a6d92fa0f"
commit = "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"
path = "crypto/bio/bf_lbuf.c"
function = "linebuffer_write"
cve = "CVE-2025-68160"
year = 2025
license = "Apache-2.0"
relpath = "crypto/bio/bf_lbuf.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Fix heap buffer overflow in BIO_f_linebuffer"
commit_url = "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2025-15469"
host = "github"
repo = "openssl/openssl"
parent = "1f08e54bad32843044fe8a675948d65e3b4ece65"
commit = "a7936fa4bd23c906e1955a16a0a0ab39a4953a61"
path = "apps/dgst.c"
function = "do_fp_oneshot_sign"
cve = "CVE-2025-15469"
year = 2025
license = "Apache-2.0"
relpath = "apps/dgst.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Report truncation in oneshot `openssl dgst -sign`"
commit_url = "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-15467"
host = "github"
repo = "openssl/openssl"
parent = "3250efdfe99d2d7fe4fb05231add7fba864b7653"
commit = "ce39170276daec87f55c39dad1f629b56344429e"
path = "crypto/evp/evp_lib.c"
function = "evp_cipher_get_asn1_aead_params"
cve = "CVE-2025-15467"
year = 2025
license = "Apache-2.0"
relpath = "crypto/evp/evp_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Correct handling of AEAD-encrypted CMS with inadmissibly long IV"
commit_url = "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2025-11187"
host = "github"
repo = "openssl/openssl"
parent = "b8654779e3b3b4eb0bda7623c0891d394e068187"
commit = "205e3a55e16e4bd08c12fdbd3416ab829c0f6206"
path = "crypto/pkcs12/p12_mutl.c"
function = "PBMAC1_PBKDF2_HMAC"
cve = "CVE-2025-11187"
year = 2025
license = "Apache-2.0"
relpath = "crypto/pkcs12/p12_mutl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "pkcs12: Validate salt and keylength in PBMAC1"
commit_url = "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-9232"
host = "github"
repo = "openssl/openssl"
parent = "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
commit = "654dc11d23468a74fc8ea4672b702dd3feb7be4b"
path = "crypto/http/http_lib.c"
function = "use_proxy"
cve = "CVE-2025-9232"
year = 2025
license = "Apache-2.0"
relpath = "crypto/http/http_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "use_proxy(): Add missing terminating NUL byte"
commit_url = "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2025-9230"
host = "github"
repo = "openssl/openssl"
parent = "7e0fc054a08706d194d3355aba4a06003cadfb29"
commit = "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
path = "crypto/cms/cms_pwri.c"
function = "kek_unwrap_key"
cve = "CVE-2025-9230"
year = 2025
license = "Apache-2.0"
relpath = "crypto/cms/cms_pwri.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "kek_unwrap_key(): Fix incorrect check of unwrapped key size"
commit_url = "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-12797"
host = "github"
repo = "openssl/openssl"
parent = "0db27ec7f8abd258d2e8849ac555ca26ba0cd8d6"
commit = "798779d43494549b611233f92652f0da5328fbe7"
path = "ssl/statem/statem_clnt.c"
function = "tls_post_process_server_rpk"
cve = "CVE-2024-12797"
year = 2024
license = "Apache-2.0"
relpath = "ssl/statem/statem_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "With SSL_VERIFY_PEER client RPK should abort on X509 error"
commit_url = "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-13176-ec_field_inverse_mod_ord"
host = "github"
repo = "openssl/openssl"
parent = "643de602771f6b38ad7823e26d5a63c669eb185b"
commit = "07272b05b04836a762b4baa874958af51d513844"
path = "crypto/ec/ec_lib.c"
function = "ec_field_inverse_mod_ord"
cve = "CVE-2024-13176"
year = 2024
license = "Apache-2.0"
relpath = "crypto/ec/ec_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix timing side-channel in ECDSA signature computation"
commit_url = "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-6119"
host = "github"
repo = "openssl/openssl"
parent = "9aae56395aa8e77c44a9df83fd395a644d016635"
commit = "06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6"
path = "crypto/x509/v3_utl.c"
function = "do_x509_check"
cve = "CVE-2024-6119"
year = 2024
license = "Apache-2.0"
relpath = "crypto/x509/v3_utl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Avoid type errors in EAI-related name check logic."
commit_url = "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-5535"
host = "github"
repo = "openssl/openssl"
parent = "189a7ed3e380e34ea38fe4190a7c9396bace0fb7"
commit = "4b375b998798dd516d367036773073e1b88e6433"
path = "ssl/statem/extensions_clnt.c"
function = "tls_parse_stoc_alpn"
cve = "CVE-2024-5535"
year = 2024
license = "Apache-2.0"
relpath = "ssl/statem/extensions_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Add ALPN validation in the client"
commit_url = "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-5535-tls_construct_stoc_next_"
host = "github"
repo = "openssl/openssl"
parent = "72394c9a1a6a6b07edf43eb2ad7e95e1093ada1b"
commit = "189a7ed3e380e34ea38fe4190a7c9396bace0fb7"
path = "ssl/statem/extensions_srvr.c"
function = "tls_construct_stoc_next_proto_neg"
cve = "CVE-2024-5535"
year = 2024
license = "Apache-2.0"
relpath = "ssl/statem/extensions_srvr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Correct return values for tls_construct_stoc_next_proto_neg"
commit_url = "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-5535-tls_parse_stoc_npn"
host = "github"
repo = "openssl/openssl"
parent = "cf6f91f6121f4db167405db2f0de410a456f260c"
commit = "159921152fd4aa91e4c849fd281ad93ac0d0d0ba"
path = "ssl/statem/extensions_clnt.c"
function = "tls_parse_stoc_npn"
cve = "CVE-2024-5535"
year = 2024
license = "Apache-2.0"
relpath = "ssl/statem/extensions_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "More correctly handle a selected_len of 0 when processing NPN"
commit_url = "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-5535-ssl_select_next_proto"
host = "github"
repo = "openssl/openssl"
parent = "a6facb1042adda2394dc5c98fbceb7625eef141a"
commit = "cf6f91f6121f4db167405db2f0de410a456f260c"
path = "ssl/ssl_lib.c"
function = "SSL_select_next_proto"
cve = "CVE-2024-5535"
year = 2024
license = "Apache-2.0"
relpath = "ssl/ssl_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix SSL_select_next_proto"
commit_url = "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-5535-alpn_select_cb"
host = "github"
repo = "openssl/openssl"
parent = "015255851371757d54c2560643eb3b3a88123cf1"
commit = "6cc511826f09e513b4ec066d9b95acaf4f86d991"
path = "ssl/quic/quic_tserver.c"
function = "alpn_select_cb"
cve = "CVE-2024-5535"
year = 2024
license = "Apache-2.0"
relpath = "ssl/quic/quic_tserver.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Use correctly formatted ALPN data in tserver"
commit_url = "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-4741"
host = "github"
repo = "openssl/openssl"
parent = "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
commit = "2d05959073c4bf8803401668b9df85931a08e020"
path = "ssl/record/rec_layer_s3.c"
function = "ssl3_read_n"
cve = "CVE-2024-4741"
year = 2024
license = "Apache-2.0"
relpath = "ssl/record/rec_layer_s3.c"
language = "c"
cwe = "CWE-416"
class = "use after free"
sink = "free"
evidence = "Set rlayer.packet to NULL after we've finished using it"
commit_url = "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020"
origin = "openssl"
project = "openssl"
mechanism = "uaf"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-4741-ssl3_release_read_buffer"
host = "github"
repo = "openssl/openssl"
parent = "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
commit = "2d05959073c4bf8803401668b9df85931a08e020"
path = "ssl/record/ssl3_buffer.c"
function = "ssl3_release_read_buffer"
cve = "CVE-2024-4741"
year = 2024
license = "Apache-2.0"
relpath = "ssl/record/ssl3_buffer.c"
language = "c"
cwe = "CWE-416"
class = "use after free"
sink = "free"
evidence = "Set rlayer.packet to NULL after we've finished using it"
commit_url = "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020"
origin = "openssl"
project = "openssl"
mechanism = "uaf"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-4741-ssl_free_buffers"
host = "github"
repo = "openssl/openssl"
parent = "ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865"
commit = "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
path = "ssl/ssl_lib.c"
function = "SSL_free_buffers"
cve = "CVE-2024-4741"
year = 2024
license = "Apache-2.0"
relpath = "ssl/ssl_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Only free the read buffers if we're not using them"
commit_url = "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-4741-tls_release_read_buffer"
host = "github"
repo = "openssl/openssl"
parent = "c88c3de51020c37e8706bf7a682a162593053aac"
commit = "10171e5b511b700c5ecd4fd3e1086b19c34b1ae3"
path = "ssl/record/methods/tls_common.c"
function = "tls_release_read_buffer"
cve = "CVE-2024-4741"
year = 2024
license = "Apache-2.0"
relpath = "ssl/record/methods/tls_common.c"
language = "c"
cwe = "CWE-416"
class = "use after free"
sink = "free"
evidence = "Set rl->packet to NULL after we've finished using it"
commit_url = "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3"
origin = "openssl"
project = "openssl"
mechanism = "uaf"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-4741-tls_free_buffers"
host = "github"
repo = "openssl/openssl"
parent = "17765d9cefed8b4ada6548719beb98e22672a9bd"
commit = "c88c3de51020c37e8706bf7a682a162593053aac"
path = "ssl/record/methods/tls_common.c"
function = "tls_free_buffers"
cve = "CVE-2024-4741"
year = 2024
license = "Apache-2.0"
relpath = "ssl/record/methods/tls_common.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Only free the read buffers if we're not using them"
commit_url = "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-4603"
host = "github"
repo = "openssl/openssl"
parent = "d4b119c567cb5dcaf83add7ca2ea1d646eb3ef9f"
commit = "3559e868e58005d15c6013a0c1fd832e51c73397"
path = "crypto/dsa/dsa_check.c"
function = "ossl_dsa_check_params"
cve = "CVE-2024-4603"
year = 2024
license = "Apache-2.0"
relpath = "crypto/dsa/dsa_check.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Check DSA parameters for excessive sizes before validating"
commit_url = "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-2511"
host = "github"
repo = "openssl/openssl"
parent = "c1e462ee4bd61867ee391fc13110ca41e4889535"
commit = "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
path = "ssl/ssl_lib.c"
function = "ssl_update_cache"
cve = "CVE-2024-2511"
year = 2024
license = "Apache-2.0"
relpath = "ssl/ssl_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix unconstrained session cache growth in TLSv1.3"
commit_url = "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-2511-tls_construct_server_hel"
host = "github"
repo = "openssl/openssl"
parent = "c1e462ee4bd61867ee391fc13110ca41e4889535"
commit = "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
path = "ssl/statem/statem_srvr.c"
function = "tls_construct_server_hello"
cve = "CVE-2024-2511"
year = 2024
license = "Apache-2.0"
relpath = "ssl/statem/statem_srvr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix unconstrained session cache growth in TLSv1.3"
commit_url = "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2024-0727"
host = "github"
repo = "openssl/openssl"
parent = "6c70934a46eaa1734c2efbe9d7baac51c607062e"
commit = "09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
path = "crypto/pkcs12/p12_mutl.c"
function = "pkcs12_gen_mac"
cve = "CVE-2024-0727"
year = 2024
license = "Apache-2.0"
relpath = "crypto/pkcs12/p12_mutl.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Add NULL checks where ContentInfo data can be NULL"
commit_url = "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2024-0727-smime_write_pkcs7"
host = "github"
repo = "openssl/openssl"
parent = "6c70934a46eaa1734c2efbe9d7baac51c607062e"
commit = "09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
path = "crypto/pkcs7/pk7_mime.c"
function = "SMIME_write_PKCS7"
cve = "CVE-2024-0727"
year = 2024
license = "Apache-2.0"
relpath = "crypto/pkcs7/pk7_mime.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Add NULL checks where ContentInfo data can be NULL"
commit_url = "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2023-5363"
host = "github"
repo = "openssl/openssl"
parent = "23d21359e35536a4ee8f7be0b245ddbfac909bff"
commit = "0df40630850fb2740e6be6890bb905d3fc623b2d"
path = "crypto/evp/evp_enc.c"
function = "evp_cipher_init_internal"
cve = "CVE-2023-5363"
year = 2023
license = "Apache-2.0"
relpath = "crypto/evp/evp_enc.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "evp: process key length and iv length early if present"
commit_url = "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2023-3817-dh_check"
host = "github"
repo = "openssl/openssl"
parent = "e648db50d9a63f71cab5cb78424c2932d019a744"
commit = "9002fd07327a91f35ba6c1307e71fa6fd4409b7f"
path = "crypto/dh/dh_check.c"
function = "DH_check"
cve = "CVE-2023-3817"
year = 2023
license = "Apache-2.0"
relpath = "crypto/dh/dh_check.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "DH_check(): Do not try checking q properties if it is obviously invalid"
commit_url = "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-3446"
host = "github"
repo = "openssl/openssl"
parent = "fe824ce0c5d51e7e7cf36c31db6c49c1c0c04a25"
commit = "8780a896543a654e757db1b9396383f9d8095528"
path = "crypto/dh/dh_check.c"
function = "DH_check"
cve = "CVE-2023-3446"
year = 2023
license = "Apache-2.0"
relpath = "crypto/dh/dh_check.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix DH_check() excessive time with over sized modulus"
commit_url = "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2023-2975"
host = "github"
repo = "openssl/openssl"
parent = "175fa8469fc78f6cf35dfb87d26899e60e9ff1d4"
commit = "00e2f5eea29994d19293ec4e8c8775ba73678598"
path = "providers/implementations/ciphers/cipher_aes_siv.c"
function = "siv_cipher"
cve = "CVE-2023-2975"
year = 2023
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_aes_siv.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Do not ignore empty associated data with AES-SIV mode"
commit_url = "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-2650"
host = "github"
repo = "openssl/openssl"
parent = "3ca28c9e81fae36b0b44dc39beecd2b5a7561975"
commit = "d63b3e7959e79f98d60760a739f7876dc5adc838"
path = "crypto/objects/obj_dat.c"
function = "OBJ_obj2txt"
cve = "CVE-2023-2650"
year = 2023
license = "Apache-2.0"
relpath = "crypto/objects/obj_dat.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate"
commit_url = "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-37454"
host = "github"
repo = "openssl/openssl"
parent = "5d6f13d90d5c4212737002bcd54871cf236a1220"
commit = "d12cde7fc5561d463badcd8a73079cf92864c31e"
path = "providers/implementations/kdfs/hkdf.c"
function = "HKDF_Expand"
cve = "CVE-2022-37454"
year = 2022
license = "Apache-2.0"
relpath = "providers/implementations/kdfs/hkdf.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Update hkdf.c to avoid potentially vulnerable code pattern"
commit_url = "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-4304"
host = "github"
repo = "openssl/openssl"
parent = "908eaceb62624f5b5c505b286d904bd3a4e8a64a"
commit = "a00d757d9ca212994625d1a02c81cc5edd27e13b"
path = "crypto/bn/bn_asm.c"
function = "bn_sub_words"
cve = "CVE-2022-4304"
year = 2022
license = "Apache-2.0"
relpath = "crypto/bn/bn_asm.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Alternative fix for CVE-2022-4304"
commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-4304-bn_blinding_invert_ex"
host = "github"
repo = "openssl/openssl"
parent = "908eaceb62624f5b5c505b286d904bd3a4e8a64a"
commit = "a00d757d9ca212994625d1a02c81cc5edd27e13b"
path = "crypto/bn/bn_blind.c"
function = "BN_BLINDING_invert_ex"
cve = "CVE-2022-4304"
year = 2022
license = "Apache-2.0"
relpath = "crypto/bn/bn_blind.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Alternative fix for CVE-2022-4304"
commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-4304-rsa_blinding_invert"
host = "github"
repo = "openssl/openssl"
parent = "908eaceb62624f5b5c505b286d904bd3a4e8a64a"
commit = "a00d757d9ca212994625d1a02c81cc5edd27e13b"
path = "crypto/rsa/rsa_ossl.c"
function = "rsa_blinding_invert"
cve = "CVE-2022-4304"
year = 2022
license = "Apache-2.0"
relpath = "crypto/rsa/rsa_ossl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Alternative fix for CVE-2022-4304"
commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2023-0465"
host = "github"
repo = "openssl/openssl"
parent = "f675d164e5d9648c3537a0f5efe1cc2fd232b4a9"
commit = "b013765abfa80036dc779dd0e50602c57bb3bf95"
path = "crypto/x509/x509_vfy.c"
function = "check_policy"
cve = "CVE-2023-0465"
year = 2023
license = "Apache-2.0"
relpath = "crypto/x509/x509_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure that EXFLAG_INVALID_POLICY is checked even in leaf certs"
commit_url = "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-0464"
host = "github"
repo = "openssl/openssl"
parent = "969327390220aee7515a4054d5189186402d6687"
commit = "879f7080d7e141f415c79eaa3a8ac4a3dad0348b"
path = "crypto/x509v3/pcy_tree.c"
function = "tree_init"
cve = "CVE-2023-0464"
year = 2023
license = "Apache-2.0"
relpath = "crypto/x509v3/pcy_tree.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "x509: excessive resource use verifying policy constraints"
commit_url = "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-0464-tree_init"
host = "github"
repo = "openssl/openssl"
parent = "c309c4dce742c3eeb393a0f03f9c567d0e368ccc"
commit = "959c59c7a0164117e7f8366466a32bb1f8d77ff1"
path = "crypto/x509/pcy_tree.c"
function = "tree_init"
cve = "CVE-2023-0464"
year = 2023
license = "Apache-2.0"
relpath = "crypto/x509/pcy_tree.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "x509: excessive resource use verifying policy constraints"
commit_url = "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449"
host = "github"
repo = "openssl/openssl"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
path = "ssl/record/methods/tls_common.c"
function = "tls_get_more_records"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/record/methods/tls_common.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3449-def_generate_session_id"
host = "github"
repo = "openssl/openssl"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
path = "ssl/ssl_sess.c"
function = "def_generate_session_id"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/ssl_sess.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449-tls_parse_ctos_renegotia"
host = "github"
repo = "openssl/openssl"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
path = "ssl/statem/extensions_srvr.c"
function = "tls_parse_ctos_renegotiate"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/extensions_srvr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3449-tls_process_finished"
host = "github"
repo = "openssl/openssl"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
path = "ssl/statem/statem_lib.c"
function = "tls_process_finished"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/statem_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-0401"
host = "github"
repo = "openssl/openssl"
parent = "7880536fe17c2b5450e279155bedd51771d28c9f"
commit = "6eebe6c0238178356114a96a7858f36b24172847"
path = "crypto/pkcs7/pk7_doit.c"
function = "pkcs7_bio_add_digest"
cve = "CVE-2023-0401"
year = 2023
license = "Apache-2.0"
relpath = "crypto/pkcs7/pk7_doit.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "pk7_doit.c: Check return of BIO_set_md() calls"
commit_url = "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2023-0286-general_name_cmp"
host = "github"
repo = "openssl/openssl"
parent = "adf77d6657e836fc87391fad53d857927a764297"
commit = "7880536fe17c2b5450e279155bedd51771d28c9f"
path = "crypto/x509/v3_genn.c"
function = "GENERAL_NAME_cmp"
cve = "CVE-2023-0286"
year = 2023
license = "Apache-2.0"
relpath = "crypto/x509/v3_genn.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix GENERAL_NAME_cmp for x400Address (master)"
commit_url = "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-0217"
host = "github"
repo = "openssl/openssl"
parent = "3436f9c24ab90c1661e4798e7944f028d5d251ce"
commit = "bcec03c33cc00a7b5eb89ebeeee59e604570a86a"
path = "crypto/ffc/ffc_key_validate.c"
function = "ossl_ffc_validate_public_key_partial"
cve = "CVE-2023-0217"
year = 2023
license = "Apache-2.0"
relpath = "crypto/ffc/ffc_key_validate.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix NULL deference when validating FFC public key."
commit_url = "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2023-0216"
host = "github"
repo = "openssl/openssl"
parent = "625faca931957719c76fb16094cf5b6e0debe23f"
commit = "80253dbdc92bec584f4a9866b43f8674156d838a"
path = "crypto/pkcs7/pk7_lib.c"
function = "STACK_OF"
cve = "CVE-2023-0216"
year = 2023
license = "Apache-2.0"
relpath = "crypto/pkcs7/pk7_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Do not dereference PKCS7 object data if not set"
commit_url = "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-4304-rsa_ossl_private_decrypt"
host = "github"
repo = "openssl/openssl"
parent = "e2d0a3b5f559e23f11e4d4687b2889b483afb22a"
commit = "8022a4799fe884b3bf8d538e2b4c4ec323663118"
path = "crypto/rsa/rsa_ossl.c"
function = "rsa_ossl_private_decrypt"
cve = "CVE-2022-4304"
year = 2022
license = "Apache-2.0"
relpath = "crypto/rsa/rsa_ossl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix Timing Oracle in RSA decryption"
commit_url = "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2020-25659"
host = "github"
repo = "openssl/openssl"
parent = "1ca61aa56090356bbdbb16cf48916fbd9886c78d"
commit = "7fc67e0a33102aa47bbaa56533eeecb98c0450f7"
path = "crypto/rsa/rsa_ossl.c"
function = "rsa_ossl_private_decrypt"
cve = "CVE-2020-25659"
year = 2020
license = "OpenSSL License"
relpath = "crypto/rsa/rsa_ossl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "rsa: add implicit rejection in PKCS#1 v1.5"
commit_url = "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-3996"
host = "github"
repo = "openssl/openssl"
parent = "9a5c884999a55595e376083b3a165515c8123049"
commit = "7725e7bfe6f2ce8146b6552b44e0d226be7638e7"
path = "crypto/x509/pcy_map.c"
function = "ossl_policy_cache_set_mapping"
cve = "CVE-2022-3996"
year = 2022
license = "Apache-2.0"
relpath = "crypto/x509/pcy_map.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "x509: fix double locking problem"
commit_url = "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-3786-ossl_punycode_decode"
host = "github"
repo = "openssl/openssl"
parent = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
commit = "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
cve = "CVE-2022-3786"
year = 2022
license = "Apache-2.0"
relpath = "crypto/punycode.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Fix CVE-2022-3786 in punycode decoder."
commit_url = "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-3602-ossl_punycode_decode"
host = "github"
repo = "openssl/openssl"
parent = "89d72311327735ef15c804d2adea84a0fb1bfa0a"
commit = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
cve = "CVE-2022-3602"
year = 2022
license = "Apache-2.0"
relpath = "crypto/punycode.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix CVE-2022-3602 in punycode decoder."
commit_url = "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-3358"
host = "github"
repo = "openssl/openssl"
parent = "9f0867da4cbf77ed642717b5e703e09ab2c087a0"
commit = "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
path = "crypto/evp/digest.c"
function = "evp_md_init_internal"
cve = "CVE-2022-3358"
year = 2022
license = "Apache-2.0"
relpath = "crypto/evp/digest.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix usage of custom EVP_CIPHER objects"
commit_url = "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-3358-evp_cipher_init_internal"
host = "github"
repo = "openssl/openssl"
parent = "9f0867da4cbf77ed642717b5e703e09ab2c087a0"
commit = "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
path = "crypto/evp/evp_enc.c"
function = "evp_cipher_init_internal"
cve = "CVE-2022-3358"
year = 2022
license = "Apache-2.0"
relpath = "crypto/evp/evp_enc.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix usage of custom EVP_CIPHER objects"
commit_url = "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-2068-hash_dir"
host = "github"
repo = "openssl/openssl"
parent = "abebcec7b1a30fbb1fd5c5cbbe8817690c139163"
commit = "2c9c35870601b4a44d86ddbf512b38df38285cfa"
path = "tools/c_rehash.in"
function = "hash_dir"
cve = "CVE-2022-2068"
year = 2022
license = "Apache-2.0"
relpath = "tools/c_rehash.in"
language = "perl"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix file operations in c_rehash."
commit_url = "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2022-29242"
host = "github"
repo = "openssl/openssl"
parent = "3be529cd2eb4eb3eaaa7913af619fb9c918d4581"
commit = "373de40f3f76c63e4f2684abd86706f3863347ca"
path = "ssl/statem/statem_clnt.c"
function = "tls_construct_cke_gost18"
cve = "CVE-2022-29242"
year = 2022
license = "Apache-2.0"
relpath = "ssl/statem/statem_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Use safe pattern for buffer size determining in case of GOST key exchange"
commit_url = "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-1434"
host = "github"
repo = "openssl/openssl"
parent = "55c80c222293a972587004c185dc5653ae207a0e"
commit = "7d56a74a96828985db7354a55227a511615f732b"
path = "providers/implementations/ciphers/cipher_rc4_hmac_md5.c"
function = "rc4_hmac_md5_set_ctx_params"
cve = "CVE-2022-1434"
year = 2022
license = "Apache-2.0"
relpath = "providers/implementations/ciphers/cipher_rc4_hmac_md5.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix the RC4-MD5 cipher"
commit_url = "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2022-1343"
host = "github"
repo = "openssl/openssl"
parent = "ae3ece03a61e8822fd7ea58f44812871efba82d1"
commit = "2eda98790c5c2741d76d23cc1e74b0dc4f4b391a"
path = "crypto/ocsp/ocsp_vfy.c"
function = "ocsp_verify_signer"
cve = "CVE-2022-1343"
year = 2022
license = "Apache-2.0"
relpath = "crypto/ocsp/ocsp_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix OCSP_basic_verify signer certificate validation"
commit_url = "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-4044"
host = "github"
repo = "openssl/openssl"
parent = "758754966791c537ea95241438454aa86f91f256"
commit = "d69ae8a93bfc0f2489c008fcf303a98d77a6df4d"
path = "crypto/x509/x509_vfy.c"
function = "has_san_id"
cve = "CVE-2021-4044"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/x509_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix infinite verification loops due to has_san_id"
commit_url = "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-4044-tls_post_process_server_"
host = "github"
repo = "openssl/openssl"
parent = "8e78289c4e6f4c9f2fec073b78443736e689854d"
commit = "758754966791c537ea95241438454aa86f91f256"
path = "ssl/statem/statem_clnt.c"
function = "tls_post_process_server_certificate"
cve = "CVE-2021-4044"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/statem_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix invalid handling of verify errors in libssl"
commit_url = "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3711-sm2_asym_decrypt"
host = "github"
repo = "openssl/openssl"
parent = "4b8a8bb75229b64d1c7598d845fdc3c7e7d7eee2"
commit = "36cf45ef3ba71e44a8be06ee81cb31aa02cb0010"
path = "providers/implementations/asymciphers/sm2_enc.c"
function = "sm2_asym_decrypt"
cve = "CVE-2021-3711"
year = 2021
license = "OpenSSL License"
relpath = "providers/implementations/asymciphers/sm2_enc.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Correctly calculate the length of SM2 plaintext given the ciphertext"
commit_url = "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3712-netscape_spki_print"
host = "github"
repo = "openssl/openssl"
parent = "98624776c4d501c8badd6f772ab7048ac9191cb9"
commit = "7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3"
path = "crypto/asn1/t_spki.c"
function = "NETSCAPE_SPKI_print"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/asn1/t_spki.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix NETSCAPE_SPKI_print function to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3712-append_ia5"
host = "github"
repo = "openssl/openssl"
parent = "1f365708a3318a5f1a395f90c38b584a58d37fb9"
commit = "98624776c4d501c8badd6f772ab7048ac9191cb9"
path = "crypto/x509/v3_utl.c"
function = "append_ia5"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/v3_utl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix append_ia5 function to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet"
host = "github"
repo = "openssl/openssl"
parent = "d2015a783e64613d8e4a142fa05048d1863df944"
commit = "95f8c1e142df835d03b5b62521383a462fc5470d"
path = "crypto/cmp/cmp_hdr.c"
function = "ossl_cmp_hdr_push1_freeText"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/cmp/cmp_hdr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix CMP code to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3712-ia5ncasecmp"
host = "github"
repo = "openssl/openssl"
parent = "918430ba80d94ec8f05383b43b1872b1ebb13e1a"
commit = "d2015a783e64613d8e4a142fa05048d1863df944"
path = "crypto/x509/v3_ncons.c"
function = "ia5ncasecmp"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/v3_ncons.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix the name constraints code to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3712-i2r_pci"
host = "github"
repo = "openssl/openssl"
parent = "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd"
commit = "918430ba80d94ec8f05383b43b1872b1ebb13e1a"
path = "crypto/x509/v3_pci.c"
function = "i2r_pci"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/v3_pci.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3712-general_name_print"
host = "github"
repo = "openssl/openssl"
parent = "1747d4658b3830951068a6a6c1fa2b45c4731fb3"
commit = "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd"
path = "crypto/x509/v3_san.c"
function = "GENERAL_NAME_print"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/v3_san.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix GENERAL_NAME_print to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3712-print_qualifiers"
host = "github"
repo = "openssl/openssl"
parent = "ad6ac17489241574136b7d035f01f6175dd9c941"
commit = "1747d4658b3830951068a6a6c1fa2b45c4731fb3"
path = "crypto/x509/v3_cpols.c"
function = "print_qualifiers"
cve = "CVE-2021-3712"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/v3_cpols.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Fix POLICYINFO printing to not assume NUL terminated strings"
commit_url = "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3711-pkey_sm2_decrypt"
host = "github"
repo = "openssl/openssl"
parent = "8c74c9d1ade0fbdab5b815ddb747351b8b839641"
commit = "59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
path = "crypto/sm2/sm2_pmeth.c"
function = "pkey_sm2_decrypt"
cve = "CVE-2021-3711"
year = 2021
license = "OpenSSL License"
relpath = "crypto/sm2/sm2_pmeth.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Correctly calculate the length of SM2 plaintext given the ciphertext"
commit_url = "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449-ssl_generate_master_secr"
host = "github"
repo = "openssl/openssl"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
path = "ssl/s3_lib.c"
function = "ssl_generate_master_secret"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/s3_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos"
host = "github"
repo = "openssl/openssl"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
path = "ssl/ssl_lib.c"
function = "SSL_CTX_set_alpn_protos"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/ssl_lib.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3449-init_sig_algs_cert"
host = "github"
repo = "openssl/openssl"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
path = "ssl/statem/extensions.c"
function = "init_sig_algs_cert"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/extensions.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449-tls_construct_ctos_early"
host = "github"
repo = "openssl/openssl"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
path = "ssl/statem/extensions_clnt.c"
function = "tls_construct_ctos_early_data"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/extensions_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3449-tls_process_certificate_"
host = "github"
repo = "openssl/openssl"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
path = "ssl/statem/statem_clnt.c"
function = "tls_process_certificate_request"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/statem_clnt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449-tls_handle_alpn"
host = "github"
repo = "openssl/openssl"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
path = "ssl/statem/statem_srvr.c"
function = "tls_handle_alpn"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/statem_srvr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-3449-init_sig_algs"
host = "github"
repo = "openssl/openssl"
parent = "112580c27b829b0ac0874d5c5787195f27c7952c"
commit = "02b1636fe3db274497304a3e95a4e32ced7e841b"
path = "ssl/statem/extensions.c"
function = "init_sig_algs"
cve = "CVE-2021-3449"
year = 2021
license = "OpenSSL License"
relpath = "ssl/statem/extensions.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "ssl sigalg extension: fix NULL pointer dereference"
commit_url = "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-3450"
host = "github"
repo = "openssl/openssl"
parent = "cfd74383d9b06f85cb1e166180346115a3f9a452"
commit = "2a40b7bc7b94dd7de897a74571e7024f0cf0d63b"
path = "crypto/x509/x509_vfy.c"
function = "check_chain_extensions"
cve = "CVE-2021-3450"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/x509_vfy.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "check_chain_extensions: Do not override error return value by check_curve"
commit_url = "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2021-23840-evp_encryptdecryptupdate"
host = "github"
repo = "openssl/openssl"
parent = "481a88f13c44996a008195791ea0dc076b968774"
commit = "6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1"
path = "crypto/evp/evp_enc.c"
function = "evp_EncryptDecryptUpdate"
cve = "CVE-2021-23840"
year = 2021
license = "OpenSSL License"
relpath = "crypto/evp/evp_enc.c"
language = "c"
cwe = "CWE-119"
class = "buffer overflow"
sink = "memcpy"
evidence = "Don't overflow the output length in EVP_CipherUpdate calls"
commit_url = "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1"
origin = "openssl"
project = "openssl"
mechanism = "unchecked_length_copy"
provenance = "human"
split = "holdout"

[[recipe]]
name = "openssl-cve-2021-23841"
host = "github"
repo = "openssl/openssl"
parent = "c8c6e7438c03b2fc24e7ead460feeaef04911fb4"
commit = "122a19ab48091c657f7cb1fb3af9fc07bd557bbf"
path = "crypto/x509/x509_cmp.c"
function = "X509_issuer_and_serial_hash"
cve = "CVE-2021-23841"
year = 2021
license = "OpenSSL License"
relpath = "crypto/x509/x509_cmp.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix Null pointer deref in X509_issuer_and_serial_hash()"
commit_url = "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2020-1971-general_name_cmp"
host = "github"
repo = "openssl/openssl"
parent = "aa0ad2011d3e7ad8a611da274ef7d9c7706e289b"
commit = "f960d81215ebf3f65e03d4d5d857fb9b666d6920"
path = "crypto/x509v3/v3_genn.c"
function = "GENERAL_NAME_cmp"
cve = "CVE-2020-1971"
year = 2020
license = "OpenSSL License"
relpath = "crypto/x509v3/v3_genn.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Correctly compare EdiPartyName in GENERAL_NAME_cmp()"
commit_url = "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920"
origin = "openssl"
project = "openssl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "openssl-cve-2020-1967-tls1_check_sig_alg"
host = "github"
repo = "openssl/openssl"
parent = "3656c08ab4b1b892730cb5e808b6f4298b08a2e6"
commit = "a87f3fe01a5a894aa27ccd6a239155fd129988e4"
path = "ssl/t1_lib.c"
function = "tls1_check_sig_alg"
cve = "CVE-2020-1967"
year = 2020
license = "OpenSSL License"
relpath = "ssl/t1_lib.c"
language = "c"
cwe = "CWE-476"
class = "null pointer dereference"
sink = "NULL"
evidence = "Fix NULL dereference in SSL_check_chain() for TLS 1.3"
commit_url = "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4"
origin = "openssl"
project = "openssl"
mechanism = "null_deref_unguarded"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2026-9080"
host = "github"
repo = "curl/curl"
parent = "f746780a1e548b4b93790b58d70c3b22fde5360d"
commit = "e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc"
path = "lib/multi_ev.c"
function = "mev_forget_socket"
cve = "CVE-2026-9080"
year = 2026
license = "curl"
relpath = "lib/multi_ev.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "multi_ev: refresh sock entry after remove callback"
commit_url = "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2023-38545-do_socks5"
host = "github"
repo = "curl/curl"
parent = "09e25b9d94f4106eac8ca3a43b221bdc66f405e4"
commit = "fb4415d8aee6c1045be932a34fe6107c2f5ed147"
path = "lib/socks.c"
function = "do_SOCKS5"
cve = "CVE-2023-38545"
year = 2023
license = "curl"
relpath = "lib/socks.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "socks: return error if hostname too long for remote resolve"
commit_url = "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-32207"
host = "github"
repo = "curl/curl"
parent = "46f8911d3942dc06fdd67e9f6f3908982e5d2fb4"
commit = "20f9dd6bae50b7223171b17ba7798946e74f877f"
path = "lib/cookie.c"
function = "cookie_output"
cve = "CVE-2022-32207"
year = 2022
license = "curl"
relpath = "lib/cookie.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "fopen: add Curl_fopen() for better overwriting of files"
commit_url = "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-32206"
host = "github"
repo = "curl/curl"
parent = "6ecdf5136b52af747e7bda08db9a748256b1cd09"
commit = "3a09fbb7f264c67c438d01a30669ce325aa508e2"
path = "lib/content_encoding.c"
function = "Curl_build_unencoding_stack"
cve = "CVE-2022-32206"
year = 2022
license = "curl"
relpath = "lib/content_encoding.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "content_encoding: return error on too many compression steps"
commit_url = "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-32208"
host = "github"
repo = "curl/curl"
parent = "2b67a0a1129b20a56ed04859fec8999f5c0c4280"
commit = "6ecdf5136b52af747e7bda08db9a748256b1cd09"
path = "lib/krb5.c"
function = "read_data"
cve = "CVE-2022-32208"
year = 2022
license = "curl"
relpath = "lib/krb5.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "krb5: return error properly on decode errors"
commit_url = "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-27782-curl_init_userdefined"
host = "github"
repo = "curl/curl"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
path = "lib/url.c"
function = "Curl_init_userdefined"
cve = "CVE-2022-27782"
year = 2022
license = "curl"
relpath = "lib/url.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-27782-gtls_shutdown"
host = "github"
repo = "curl/curl"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
path = "lib/vtls/gtls.c"
function = "gtls_shutdown"
cve = "CVE-2022-27782"
year = 2022
license = "curl"
relpath = "lib/vtls/gtls.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-27782-nss_setup_connect"
host = "github"
repo = "curl/curl"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
path = "lib/vtls/nss.c"
function = "nss_setup_connect"
cve = "CVE-2022-27782"
year = 2022
license = "curl"
relpath = "lib/vtls/nss.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-27782-ossl_connect_step1"
host = "github"
repo = "curl/curl"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
path = "lib/vtls/openssl.c"
function = "ossl_connect_step1"
cve = "CVE-2022-27782"
year = 2022
license = "curl"
relpath = "lib/vtls/openssl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-27782-curl_free_primary_ssl_co"
host = "github"
repo = "curl/curl"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
path = "lib/vtls/vtls.c"
function = "Curl_free_primary_ssl_config"
cve = "CVE-2022-27782"
year = 2022
license = "curl"
relpath = "lib/vtls/vtls.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-27778"
host = "github"
repo = "curl/curl"
parent = "fae6fea209a2d4db1582f608bd8cc8000721733a"
commit = "8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3"
path = "src/tool_operate.c"
function = "post_per_transfer"
cve = "CVE-2022-27778"
year = 2022
license = "curl"
relpath = "src/tool_operate.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "post_per_transfer: remove the updated file name"
commit_url = "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-30115"
host = "github"
repo = "curl/curl"
parent = "ff3ee510c328db03bf171cae6179bb9463fb054f"
commit = "fae6fea209a2d4db1582f608bd8cc8000721733a"
path = "lib/hsts.c"
function = "hsts_create"
cve = "CVE-2022-30115"
year = 2022
license = "curl"
relpath = "lib/hsts.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "hsts: ignore trailing dots when comparing hosts names"
commit_url = "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-27780"
host = "github"
repo = "curl/curl"
parent = "5c7da89d404bf59c8dd82a001119a16d18365917"
commit = "914aaab9153764ef8fa4178215b8ad89d3ac263a"
path = "lib/urlapi.c"
function = "hostname_check"
cve = "CVE-2022-27780"
year = 2022
license = "curl"
relpath = "lib/urlapi.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "urlapi: reject percent-decoding host name into separator bytes"
commit_url = "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-27774"
host = "github"
repo = "curl/curl"
parent = "08b8ef4e726ba10f45081ecda5b3cea788d3c839"
commit = "620ea21410030a9977396b4661806bc187231b79"
path = "lib/transfer.c"
function = "Curl_follow"
cve = "CVE-2022-27774"
year = 2022
license = "curl"
relpath = "lib/transfer.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "transfer: redirects to other protocols or ports clear auth"
commit_url = "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-27776"
host = "github"
repo = "curl/curl"
parent = "8f2079154f80561ccffcaa954268798b658e66b6"
commit = "6e659993952aa5f90f48864be84a1bbb047fc258"
path = "lib/http.c"
function = "Curl_add_custom_headers"
cve = "CVE-2022-27776"
year = 2022
license = "curl"
relpath = "lib/http.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "http: avoid auth/cookie on redirects same host diff port"
commit_url = "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2022-27775"
host = "github"
repo = "curl/curl"
parent = "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425"
commit = "058f98dc3fe595f21dc26a5b9b1699e519ba5705"
path = "lib/conncache.c"
function = "hashkey"
cve = "CVE-2022-27775"
year = 2022
license = "curl"
relpath = "lib/conncache.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "conncache: include the zone id in the \"bundle\" hashkey"
commit_url = "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2022-22576-conn_free"
host = "github"
repo = "curl/curl"
parent = "ff2f3e836702daa82e2356195482fcc95f4257dc"
commit = "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425"
path = "lib/url.c"
function = "conn_free"
cve = "CVE-2022-22576"
year = 2022
license = "curl"
relpath = "lib/url.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "url: check sasl additional parameters for connection reuse."
commit_url = "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22947"
host = "github"
repo = "curl/curl"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
path = "lib/ftp.c"
function = "ftp_statemachine"
cve = "CVE-2021-22947"
year = 2021
license = "curl"
relpath = "lib/ftp.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22947-imap_state_starttls_resp"
host = "github"
repo = "curl/curl"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
path = "lib/imap.c"
function = "imap_state_starttls_resp"
cve = "CVE-2021-22947"
year = 2021
license = "curl"
relpath = "lib/imap.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22947-pop3_state_starttls_resp"
host = "github"
repo = "curl/curl"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
path = "lib/pop3.c"
function = "pop3_state_starttls_resp"
cve = "CVE-2021-22947"
year = 2021
license = "curl"
relpath = "lib/pop3.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22947-smtp_state_starttls_resp"
host = "github"
repo = "curl/curl"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
path = "lib/smtp.c"
function = "smtp_state_starttls_resp"
cve = "CVE-2021-22947"
year = 2021
license = "curl"
relpath = "lib/smtp.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22946"
host = "github"
repo = "curl/curl"
parent = "43157490a5054bd24256fe12876931e8abc9df49"
commit = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
path = "lib/ftp.c"
function = "ftp_statemachine"
cve = "CVE-2021-22946"
year = 2021
license = "curl"
relpath = "lib/ftp.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3: do not ignore --ssl-reqd"
commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22946-imap_state_capability_re"
host = "github"
repo = "curl/curl"
parent = "43157490a5054bd24256fe12876931e8abc9df49"
commit = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
path = "lib/imap.c"
function = "imap_state_capability_resp"
cve = "CVE-2021-22946"
year = 2021
license = "curl"
relpath = "lib/imap.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3: do not ignore --ssl-reqd"
commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22946-pop3_state_capa_resp"
host = "github"
repo = "curl/curl"
parent = "43157490a5054bd24256fe12876931e8abc9df49"
commit = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
path = "lib/pop3.c"
function = "pop3_state_capa_resp"
cve = "CVE-2021-22946"
year = 2021
license = "curl"
relpath = "lib/pop3.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp,imap,pop3: do not ignore --ssl-reqd"
commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22945"
host = "github"
repo = "curl/curl"
parent = "409a4412409371db00af0a3fe987e517bfab3d19"
commit = "43157490a5054bd24256fe12876931e8abc9df49"
path = "lib/mqtt.c"
function = "mqtt_send"
cve = "CVE-2021-22945"
year = 2021
license = "curl"
relpath = "lib/mqtt.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "mqtt: clear the leftovers pointer when sending succeeds"
commit_url = "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22924"
host = "github"
repo = "curl/curl"
parent = "fd9b40bf8dfd43edcbc0d254d613d95a11061c05"
commit = "5ea3145850ebff1dc2b13d17440300a01ca38161"
path = "lib/url.c"
function = "create_conn"
cve = "CVE-2021-22924"
year = 2021
license = "curl"
relpath = "lib/url.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivity"
commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22924-nss_do_connect"
host = "github"
repo = "curl/curl"
parent = "fd9b40bf8dfd43edcbc0d254d613d95a11061c05"
commit = "5ea3145850ebff1dc2b13d17440300a01ca38161"
path = "lib/vtls/nss.c"
function = "nss_do_connect"
cve = "CVE-2021-22924"
year = 2021
license = "curl"
relpath = "lib/vtls/nss.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivity"
commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22924-servercert"
host = "github"
repo = "curl/curl"
parent = "fd9b40bf8dfd43edcbc0d254d613d95a11061c05"
commit = "5ea3145850ebff1dc2b13d17440300a01ca38161"
path = "lib/vtls/openssl.c"
function = "servercert"
cve = "CVE-2021-22924"
year = 2021
license = "curl"
relpath = "lib/vtls/openssl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivity"
commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22925"
host = "github"
repo = "curl/curl"
parent = "12284e008bad5156b67d0ac253331a96d77201d1"
commit = "894f6ec730597eb243618d33cc84d71add8d6a8a"
path = "lib/telnet.c"
function = "suboption"
cve = "CVE-2021-22925"
year = 2021
license = "curl"
relpath = "lib/telnet.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "telnet: fix option parser to not send uninitialized contents"
commit_url = "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22901-ossl_connect_step1"
host = "github"
repo = "curl/curl"
parent = "39ce47f219b09c380b81f89fe54ac586c8db6bde"
commit = "7f4a9a9b2a49547eae24d2e19bc5c346e9026479"
path = "lib/vtls/openssl.c"
function = "ossl_connect_step1"
cve = "CVE-2021-22901"
year = 2021
license = "curl"
relpath = "lib/vtls/openssl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "openssl: associate/detach the transfer from connection"
commit_url = "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22898"
host = "github"
repo = "curl/curl"
parent = "bbb71507b7bab52002f9b1e0880bed6a32834511"
commit = "39ce47f219b09c380b81f89fe54ac586c8db6bde"
path = "lib/telnet.c"
function = "suboption"
cve = "CVE-2021-22898"
year = 2021
license = "curl"
relpath = "lib/telnet.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "telnet: check sscanf() for correct number of matches"
commit_url = "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2021-22890"
host = "github"
repo = "curl/curl"
parent = "7214288898f5625a6cc196e22a74232eada7861c"
commit = "b09c8ee15771c614c4bf3ddac893cdb12187c844"
path = "lib/vtls/bearssl.c"
function = "bearssl_connect_step1"
cve = "CVE-2021-22890"
year = 2021
license = "curl"
relpath = "lib/vtls/bearssl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "vtls: add 'isproxy' argument to Curl_ssl_get/addsessionid()"
commit_url = "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2021-22876"
host = "github"
repo = "curl/curl"
parent = "184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9"
commit = "7214288898f5625a6cc196e22a74232eada7861c"
path = "lib/transfer.c"
function = "Curl_follow"
cve = "CVE-2021-22876"
year = 2021
license = "curl"
relpath = "lib/transfer.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "transfer: strip credentials from the auto-referer header field"
commit_url = "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2020-8286"
host = "github"
repo = "curl/curl"
parent = "69a358f2186e04cf44698b5100332cbf1ee7f01d"
commit = "d9d01672785b8ac04aab1abb6de95fe3072ae199"
path = "lib/vtls/openssl.c"
function = "verifystatus"
cve = "CVE-2020-8286"
year = 2020
license = "curl"
relpath = "lib/vtls/openssl.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "openssl: make the OCSP verification verify the certificate id"
commit_url = "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2020-8284"
host = "github"
repo = "curl/curl"
parent = "abd846c374c5269809ce11740754bc6f00a0b193"
commit = "ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
path = "lib/url.c"
function = "Curl_init_userdefined"
cve = "CVE-2020-8284"
year = 2020
license = "curl"
relpath = "lib/url.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp: CURLOPT_FTP_SKIP_PASV_IP by default"
commit_url = "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2020-8284-config_init"
host = "github"
repo = "curl/curl"
parent = "abd846c374c5269809ce11740754bc6f00a0b193"
commit = "ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
path = "src/tool_cfgable.c"
function = "config_init"
cve = "CVE-2020-8284"
year = 2020
license = "curl"
relpath = "src/tool_cfgable.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "ftp: CURLOPT_FTP_SKIP_PASV_IP by default"
commit_url = "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2020-8231-curl_multi_add_handle"
host = "github"
repo = "curl/curl"
parent = "687908c6e6332b2bf4ba74b271e795f9c65a5a61"
commit = "3c9e021f86872baae412a427e807fbfa2f3e8a22"
path = "lib/multi.c"
function = "curl_multi_add_handle"
cve = "CVE-2020-8231"
year = 2020
license = "curl"
relpath = "lib/multi.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Curl_easy: remember last connection by id, not by pointer"
commit_url = "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "holdout"

[[recipe]]
name = "curl-cve-2020-8231-curl_open"
host = "github"
repo = "curl/curl"
parent = "687908c6e6332b2bf4ba74b271e795f9c65a5a61"
commit = "3c9e021f86872baae412a427e807fbfa2f3e8a22"
path = "lib/url.c"
function = "Curl_open"
cve = "CVE-2020-8231"
year = 2020
license = "curl"
relpath = "lib/url.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "Curl_easy: remember last connection by id, not by pointer"
commit_url = "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"

[[recipe]]
name = "curl-cve-2020-8177"
host = "github"
repo = "curl/curl"
parent = "26d2755d7c3181e90e46014778941bff53d2309f"
commit = "8236aba58542c5f89f1d41ca09d84579efb05e22"
path = "src/tool_cb_hdr.c"
function = "tool_header_cb"
cve = "CVE-2020-8177"
year = 2020
license = "curl"
relpath = "src/tool_cb_hdr.c"
language = "c"
cwe = "CWE-119"
class = "security fix"
sink = "unknown"
evidence = "tool_getparam: -i is not OK if -J is used"
commit_url = "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22"
origin = "curl"
project = "curl"
mechanism = "other"
provenance = "human"
split = "train"