Lucene search
+L

2 matches found

Patchstack
Patchstack
•added 2026/10/30 11:02 p.m.•3 views

npm: Forge: TLS client crash when the server sends no certificate

npm: Forge: TLS client crash when the server sends no certificate vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

5.9CVSS5.8AI score0.00204EPSS
SaveExploits0References5Affected Software1
osv_mgasa
osv_mgasa
•added 2020/09/30 10:01 a.m.•24 views

MGASA-2020-0379 Updated gnutls packages fix security vulnerability

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the...

7.5CVSS7.3AI score0.0383EPSS
SaveExploits1References4
Rows per page
Query Builder