Dan Gudmundsson

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

uri_string does not bound the port component of a URI before integer conversion

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

DTLS server cookie bypass during startup window due to empty initial cookie secret

DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension