H2o Picotls vulnerabilities

• h2o picotls Picotls has NULL pointer dereference during handshake, when running as a client CVE-2026-59993 6.5 MediumOctober 30, 2026
• h2o picotls picotls has infinite recursion in the minicrypto ASN.1 decoder CVE-2026-45271 5.5 MediumAugust 21, 2026
• dena picotls Picotls double free CVE-2024-45402 8.6 HighOctober 11, 2024