← All credits

Alex Gaynor in collaboration with Claude and Anthropic Research

29 vulnerability records and advisories credit this contributor.

BKS/UBER keystore allocates from untrusted lengths before integrity check

Stapled OCSP response accepted without binding to the checked certificate

BCFKS keystore load honours unbounded KDF cost from untrusted file

CCM-family modes write plaintext to caller buffer before tag check

HSS public-key level count unbounded, enabling huge allocation on verify

Quadratic-time escaping when stringifying X.500 distinguished names

KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)

IESEngine stream-mode MAC forgery via length-dependent KDF split

OpenPGP AEAD decryption skips final tag on chunk-aligned data

MLS wire decoder allocates attacker-declared opaque length before bounds check