GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12.3M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2025-70888: Missing X509 Key Usage Digital Signature Checkcve-2025-70888-missing-x509-key-usage-digital-signature-check

Signer certificate is validated against extendedKeyUsage XKU_CODE_SIGN but the X.509 keyUsage extension is not checked for X509v3_KU_DIGITAL_SIGNATURE. RFC 5280 section 4.2.1.3 requires that, when keyUsage is present, a certificate used for signing must assert digitalSignature. Failing to enforce this allows certificates whose issuing CA did not authorize di

CCVE-2025-70888CWE-285CWE-295
by Provallyupdated 2026-06-12Apache-2.0
3.5K0 direct3.5K via packs
80
All matching rules loaded.