Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/26 11:8 p.m.26 views

netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures

HKDFexpand: returns non-NULL on failure. The byte is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key. When EVPHPKECTXexport fails it also returns an empty byte...

6.9CVSS5.8AI score0.00193EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder