The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.

Published May 26, 2020 · Updated Aug 4, 2024 · Assigned by mitre