← All credits

Alex Gaynor in collaboration with Claude and Anthropic Research

29 vulnerability records and advisories credit this contributor.

MLS wire decoder allocates attacker-declared opaque length before bounds check

RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

Lazy ASN.1 sequence forcing resets nesting-depth guard

DTLS handshake reassembler allocates buffer from unchecked 24-bit length

MLS hash-ratchet honours arbitrary 32-bit generation counter from sender

OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

CRMF/CMP password-MAC honours unbounded iteration count

OpenPGP Argon2 S2K honours attacker-chosen memory and passes

OpenPGP user-attribute subpacket length bounded only by JVM max memory

MTI/A0 DH agreement exponentiates unvalidated peer value