VYPR

LDAP client implementation

by Apache

CVEs (1)

  • CVE-2026-35563HigJun 1, 2026
    risk 0.48cvss 8.5epss 0.00

    It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification …