1 matches found
GHSA-WC96-39FC-566F Netty: TOCTOU in OcspServerCertificateValidator
Summary Netty's OcspServerCertificateValidator forwards the SslHandshakeCompletionEvent before the asynchronous OCSP validation completes. This allows the client's downstream handlers to send sensitive application data e.g., HTTP requests to a revoked server before the channel is closed by the OC...