GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
GoAhead can accept revoked client certificates on affected OpenSSL mutual-TLS builds despite configured revocation lists; version 6.1.1 fixes it.
More info