Non-CA certificate accepted as intermediate issuer in public_key path validation

{
                    "cpes": [
                        "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unknown",
                    "modules": [
                        "pubkey_cert"
                    ],
                    "packageName": "otp",
                    "packageURL": "pkg:software-id/erlang.org/otp",
                    "product": "OTP",
                    "programFiles": [
                        "lib/public_key/src/pubkey_cert.erl"
                    ],
                    "programRoutines": [
                        {
                            "name": "pubkey_cert:validate_extensions/7"
                        }
                    ],
                    "vendor": "Erlang",
                    "versions": [
                        {
                            "changes": [
                                {
                                    "at": "27.3.4.19",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "28.5.0.8",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "29.1.2",
                                    "status": "unaffected"
                                }
                            ],
                            "lessThan": "*",
                            "status": "affected",
                            "version": "17.0",
                            "versionType": "otp"
                        }
                    ]
                }

{
                    "cpes": [
                        "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unknown",
                    "modules": [
                        "pubkey_cert"
                    ],
                    "packageName": "public_key",
                    "packageURL": "pkg:otp/public_key?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git",
                    "product": "OTP",
                    "programFiles": [
                        "src/pubkey_cert.erl"
                    ],
                    "programRoutines": [
                        {
                            "name": "pubkey_cert:validate_extensions/7"
                        }
                    ],
                    "repo": "https://github.com/erlang/otp",
                    "vendor": "Erlang",
                    "versions": [
                        {
                            "changes": [
                                {
                                    "at": "1.17.1.7",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "1.20.3.6",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "1.21.8",
                                    "status": "unaffected"
                                }
                            ],
                            "lessThan": "*",
                            "status": "affected",
                            "version": "0.22",
                            "versionType": "otp"
                        }
                    ]
                }

{
                    "collectionURL": "https://github.com",
                    "cpes": [
                        "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unknown",
                    "modules": [
                        "pubkey_cert"
                    ],
                    "packageName": "erlang/otp",
                    "packageURL": "pkg:github/erlang/otp",
                    "product": "OTP",
                    "programFiles": [
                        "lib/public_key/src/pubkey_cert.erl"
                    ],
                    "programRoutines": [
                        {
                            "name": "pubkey_cert:validate_extensions/7"
                        }
                    ],
                    "repo": "https://github.com/erlang/otp",
                    "vendor": "Erlang",
                    "versions": [
                        {
                            "changes": [
                                {
                                    "at": "0a05b7ca33fb0b3f0a6cb9ae34252bb3a74032b8",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "75ca4c0dc2bbdb286ac3c3fe89cb4b4d2b4dc333",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "82af606b5437c4de1276dbcc8855a47e88231226",
                                    "status": "unaffected"
                                }
                            ],
                            "lessThan": "*",
                            "status": "affected",
                            "version": "84adefa331c4159d432d22840663c38f155cd4c1",
                            "versionType": "git"
                        },
                        {
                            "lessThan": "*",
                            "status": "unaffected",
                            "version": "0a05b7ca33fb0b3f0a6cb9ae34252bb3a74032b8",
                            "versionType": "git"
                        },
                        {
                            "lessThan": "*",
                            "status": "unaffected",
                            "version": "75ca4c0dc2bbdb286ac3c3fe89cb4b4d2b4dc333",
                            "versionType": "git"
                        },
                        {
                            "lessThan": "*",
                            "status": "unaffected",
                            "version": "82af606b5437c4de1276dbcc8855a47e88231226",
                            "versionType": "git"
                        }
                    ]
                }