Source status: AISLE attributes discovery to its platform. The libgit2 project GHSA independently confirms CVE-2026-53583 and rates it moderate, CVSS 6.5.
Summary
An inverted comparison in libgit2’s OpenSSL backend can treat a mismatched IP Subject Alternative Name as a match, weakening server-authenticity checks. The project advisory was public on July 18; the CVE record followed on August 20.
The severity follows the upstream project rating of moderate 6.5. The AI role remains self-reported because the project confirms the vulnerability while AISLE’s registry supplies the model-workflow attribution.
References
Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.