CVE-2025-11932

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description The server previously verified the TLS 1.3 PSK binder using a non-constant time method, which could potentially leak information about the PSK binder. The TLS 1.3 PSK binder is a cryptographic element used to establish a secure connection. A non-constant time verification method can be exploited to reveal information about the binder, potentially compromising the security of the connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.