Skip to content
OpenAdvisories

Package · Hex

quic

1 known vulnerabilities.

1 result · Feed

  • Critical 9.1

    QUIC has Broken TLS verification

    erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname …