crypto-validation

• CVE-2026-6331 - HMAC zero-length tag forgery MAC verification bypass 2026-06-29
• CVE-2026-7511 - PKCS7_verify signer confusion allows signature verification bypass 2026-06-29
• CVE-2026-8720 - wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard MAC verification bypass 2026-06-29