OpenSSL reported a one-byte buffer overread vulnerability related to X.509 certificate processing [1]. According OpenSSL, the severity is low and no release is made to fix the vulnerability.
The criticality for Airlock WAF is negligible. No action required.