Report a finding privately
Use the repository Security tab to report a vulnerability. Include the affected commit, a minimal reproduction and the expected result.
Relevant findings include consensus differences between implementations, a cheaper way to produce valid TNet tickets, malformed-input crashes and unbounded resource use.
External review of the work function remains planned. See the research page for known limitations.
Report a vulnerability