Repository navigation
Security: chipsalliance/caliptra-sw
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Production Debug-Unlock Token Verification Missing Device BindingGHSA-hw68-jjx4-m376 published
Aug 4, 2026 by nquartonLow -
Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)GHSA-49mm-5gq5-v97f published
Aug 4, 2026 by nquartonModerate -
Unverified AXI Address in Subsystem Mode Commands Enables Denial of ServiceGHSA-c5v4-q445-wv84 published
Jul 22, 2026 by nquartonModerate -
MCU Firmware Update Authentication Bypass on Caliptra CoreGHSA-456r-gcjr-6rxq published
Jun 23, 2026 by nquartonHigh -
AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is EmptyGHSA-834g-h5x6-2hqr published
Jun 23, 2026 by nquartonModerate