Arnaud Le Blanc

IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

TLS Hostname Verification Falls Back to CN After SAN Mismatch

Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

Cross-origin credential leak in HTTP stream wrapper redirects

SQL injection in pdo_firebird via NUL bytes in quoted strings