HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-29653.json"