PT-2026-144407

Name of the Vulnerable Software and Affected Versions Forge versions prior to 1.4.3 Description A forge.tls client accepts a compression method in the ServerHello that it did not offer. When the client handles ServerHelloDone, the tls.createConnectionState function rejects the unsupported...