- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 critical, 1 high
Advisories 2
- CVE-2026-59638Critical 9.3
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-59646High 8.7
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
Affected: from 2.73.0, fixed in 2.73.12.