CVE-2026-54876 affects multiple packages. Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. See references for individual vulnerability details.