Source: softhsm2 Severity: serious Since headers provided by OASIS PKCS11 are not-exactly free license (they do not allow modification),
I found upstream of softhsm2 has already fixed this issue by using an alternative header from p11-kit which is licensed under a more liberal license. Regards, Alvin Chen
