wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.
{ "urgency": "not yet assigned" }