Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/05/26 11:08 p.m.•34 views

netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures

HKDFexpand: returns non-NULL on failure. The byte is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key. When EVPHPKECTXexport fails it also returns an empty byte...

6.9CVSS6.6AI score0.00322EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder