Nlnet Labs Krill vulnerabilities
- nlnet labs krill Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server 8.4 High
- nlnet labs krill Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import 8.4 High
- nlnet labs krill Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token 8.4 High
- nlnet labs krill Triggered crash on direct RRDP access 7.5 High