TI-2026-15850 CVE-2026-19445 · GHSA-7jvw-f348-84gq
Use-after-free of a server-side SSLContext when sni_callback switches contexts
Priority MEDIUM 40
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server nam…