Security: Phala-Network/dcap-qvl
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Unauthenticated CRL handling in the @phala/dcap-qvl JavaScript verifier allows DCAP certificate-revocation bypassGHSA-2cjj-h43h-m6xj published
Jul 22, 2026 by kvinwangModerate -
TCB component-wise comparison silently truncates via `.zip()`GHSA-6q6c-vvf9-fj3w published
Jul 22, 2026 by kvinwangLow -
Missing Verification for QE Identity in dcap-qvlGHSA-796p-j2gh-9m2q published
Jan 24, 2026 by kvinwangCritical