Issues

• TLSE Vulnerability Report: Zero-length CertificateVerify Silently Accepted — mTLS Handshake Completes Without Any Valid Signature

  eduardsui/tlse#166 · Filter by author Chen011214 opened on Oct 25, 2026
  1

• TLSE Vulnerability Report: Certificate-less Client Passes Mandatory Client Authentication (SSL_VERIFY_FAIL_IF_NO_PEER_CERT not implemented)

  eduardsui/tlse#165 · Filter by author Chen011214 opened on Oct 25, 2026

• TLSE Vulnerability Report: mTLS Identity Forgery — Client with an Untrusted Self-Signed Certificate Judged "Verified" by the Server

  eduardsui/tlse#164 · Filter by author Chen011214 opened on Oct 25, 2026
  2

• fix for TLS_AMALGAMATION build

  eduardsui/tlse#162 · Filter by author RandoOnSteam opened on Oct 14, 2026
  1

• NULL/out-of-bounds read crash in tls_parse_message triggered by a zero-length handshake record after the server flight

  eduardsui/tlse#161 · Filter by author songshangru opened on Oct 12, 2026

• Heap buffer overflow (WRITE) in server flight construction when the ClientHello cipher_suites list is empty

  eduardsui/tlse#160 · Filter by author songshangru opened on Oct 12, 2026

• Some HKDF Fixes

  eduardsui/tlse#158 · Filter by author headscott opened on Sep 3, 2026
  1

• Remove redundant X25519 scalar clamping

  eduardsui/tlse#157 · Filter by author headscott opened on Sep 1, 2026
  1

• Potential collision between TLS curve defines and TLS NamedGroup values

  eduardsui/tlse#155 · Filter by author headscott opened on Aug 20, 2026

• Prevent stale ASN.1 field path state from causing false field matches

  eduardsui/tlse#154 · Filter by author headscott opened on Aug 19, 2026

• Multiple illegal instruction exceptions being thrown in LLVM-based builds (Clang and Zig CC) on Windows

  eduardsui/tlse#153 · Filter by author Wertzui123 opened on Aug 10, 2026
  1

• fast_s_mp_mul_digs copies one uninitialized element from temporary buffer

  eduardsui/tlse#152 · Filter by author headscott opened on Aug 4, 2026
  2

• Support RSASSA-PSS (RSA-PSS) certificate signatures

  eduardsui/tlse#151 · Filter by author headscott opened on Jul 28, 2026

• Unused sequence decoding functions

  eduardsui/tlse#150 · Filter by author headscott opened on Jul 27, 2026

• TLS_CHECK_PREMASTER_KEY is never defined

  eduardsui/tlse#144 · Filter by author zzwenb opened on Jul 20, 2026

• Uncontrolled Recursion in ASN.1 Certificate Parsing Leads to Stack Exhaustion (DoS)

  eduardsui/tlse#142 · Filter by author Chen011214 opened on Jun 26, 2026
  2

• Heap-buffer-overflow in tls_parse_message AEAD IV construction

  eduardsui/tlse#141 · Filter by author Chen011214 opened on Jun 24, 2026

• Several RFC Incompliance in TLSe

  eduardsui/tlse#140 · Filter by author X1AOxiang opened on Apr 12, 2026
  1

• Security: fuzz-found crashes in RSA verify, record parse, and ClientHello SNI

  eduardsui/tlse#139 · Filter by author afldl opened on Apr 8, 2026

• TLSE Protocol Compliance Issue Report

  eduardsui/tlse#138 · Filter by author jmc12138 opened on Mar 4, 2026

• Heap buffer overflow in tls_parse_finished verify_data realloc + DTLS fragment OOB read + TLS 1.3 content type underflow

  eduardsui/tlse#137 · Filter by author ByamB4 opened on Feb 17, 2026
  2

• CHECK_SIZE macro signed comparison allows ASN.1 length bypass in certificate parsing

  eduardsui/tlse#136 · Filter by author ByamB4 opened on Feb 17, 2026
  1

• صوير

  eduardsui/tlse#130 · Filter by author mkaoy71-bot opened on Oct 13, 2025
  2

• Some Protocol Violations Report

  eduardsui/tlse#128 · Filter by author songxpu opened on Jul 16, 2025
  11

• How to export private key from context->ecc_dhe->k

  eduardsui/tlse#123 · Filter by author naushadck opened on Feb 14, 2025
  2