CVE-2026-117666

The deadtrickster ssl_verify_fun library (versions 1.0.1 to 1.1.8 ) contains an Improper Validation of Certificate with Host Mismatch vulnerability. The root cause is in the try_match_wildcard/4 function within src/ssl_verify_hostname.erl, which incorrectly anchors text around a wildcard, allowin...