CVE-2026-82509

The V programming language standard library net.http (through version 0.5.2 prior to commit 4077484 ) contains a TLS certificate validation bypass vulnerability. The root cause is the default false value of SSLConnectConfig.validate and FetchConfig.validate, which allows TLS handshakes to complet...