PT-2026-146900

Grid Community Toolkit before 6.2.20261111 globus-gss-assist before 12.9 contains a heap out-of-bounds write in globus gss assist token get fd triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and...