Actions
Security #7267
closedja4: non alphanumeric characters in alpn lead to panic
Git IDs:
1e152d1f1060a5afd39496d4f2556e7159cd22cc
Severity:
CRITICAL
Disclosure Date:
12/23/2024
Description
Found by oss-fuzz:
https://issues.oss-fuzz.com/issues/368729563
And we did not follow what the spec described for the case https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/JA4.md#alpn-extension-value
Actions