JLSEC-2026-172 | Vulnetix

JLSEC-2026-172 PUBLISHED CVSS 5 MEDIUM

Record from OSV · Published April 21, 2026

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c `ber_next_element`, resulting in denial of service.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
OpenLDAPClient_jll	juliahub.com	2.5.14+0
OpenLDAPClient_jll	pkg.julialang.org	2.5.14+0

Risk scores

CVSS 2.0

Affected products

Vendor	Product	Versions
Julia	OpenLDAPClient_jll	0
Julia	OpenLDAPClient_jll	0

Timeline

Apr 21, 2026 CVE Published
Jul 25, 2026 CVE Updated
Aug 8, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln JLSEC-2026-172
vulnetix vdb fixes JLSEC-2026-172

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/JLSEC-2026-172/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →