Change #263974
| Category | curl |
| Changed by | Daniel Stenberg <daniel@haxx.se> |
| Changed at | Wed 08 Apr 2026 11:27:31 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | 59c8de789764e004e7e16d00702ba956dbb8cd2f |
Comments
mbedtls: fix ECJPAKE matching It did not require a full-length match, so empty or prefix tokens map to ECJPAKE would silently add that cipher to the configured list. Follow-up to fba9afebba22d577f122239b18 Reported by Codex Security Closes #21264
Changed files
- lib/vtls/mbedtls.c