GHSA-9f6q-cw24-v4xvHighCVSS 7.5
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s...
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.