picotls vulnerabilities

CVEs whose affected-version data names the picotls package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59993Medium· 6.5

1w ago

Picotls has NULL pointer dereference during handshake, when running as a client

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a `client-side TLS stack`, a peer can send a `HelloRetryRequest`…

▾ Sunlith2o · picotlsEPSS 0.25%via CVEORG