CVE-2023-36660: Nettle Project Nettle

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.

Affected products

• Nettle Project Nettle: version 3.9 only

Published 2023-06-25. Last modified 2026-06-17.