CVE-2019-18633: Europa Eidas-Node Integration Package

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected.

Affected products

• Europa Eidas-Node Integration Package: version 2.1 only

Published 2019-10-30. Last modified 2026-06-17.