GHSA-9f6q-cw24-v4xvHighCVSS 7.5

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s...

Published
November 10, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.

🔗 References (4)