CVE-2022-48195

A flaw was found in mellium.im/sasl. Affected versions of this package are vulnerable to Missing Critical Steps in Authentication if the remote side of a SCRAM-based connection advertises support for channel binding since an empty nonce is used...