Jakub Witczak

Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

Non-CA certificate accepted as intermediate issuer in public_key path validation

Megaco flex scanner buffer overflow via oversized property parm name

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

Denial of service via exponential certificate policy tree growth in path validation