Ingela Anderton Andin

Non-CA certificate accepted as intermediate issuer in public_key path validation

Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

httpc leaks Authorization header to cross-origin redirect targets

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

uri_string does not bound the port component of a URI before integer conversion

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks