← All credits

Alex Gaynor (Anthropic)

8 vulnerability records and advisories credit this contributor.

FFC-DH Peer Validation Uses Attacker-Supplied q

PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

CMS AuthEnvelopedData Processing May Accept Forged Messages

Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

AES-OCB IV Ignored on EVP_Cipher() Path

Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support