SECURITY ANNOUNCEMENT

CVE-2026-99059

23 October 2026

This seems basically impossible to hit in a meaningful way in practice, but ensure that it absolutely cannot happen by comparing the ephemeral private key that's on the stack with the latest one that the peer's

Introduced

5.6e7096c131e5161fa3b8e52a650d7719d2857adfd

Fixed releases

6.12.113c76a80db593096edf2b3b3972f58b6342a8c6c04

6.18.574d64a3d6e96aa78619c9c29ffde309794974588a

6.6.160fb5ce4c7790c3eeec820302d08d70ecf46af4295

7.2.113bec3d32c2a3afd164fc87f95457df2cf9049c20

7.3d0305f8d90029556260c6824b61c493c424eba9e

View source announcement ↗