Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2026/10/30 11:02 p.m.•5 views

GHSA-525V-9GP9-W22H Forge: TLS client crash when the server sends no certificate

Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make connection.process throw a TypeError, which crashes applications that use the forge TL...

5.9CVSS5.9AI score0.00204EPSS
SaveExploits0References5
Rows per page
Query Builder