Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jh8-xj74-jhxx

Опубликовано: 23 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options

EPSS

Процентиль: 8%
0.00183
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 9.1
nvd
7 месяцев назад

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options

EPSS

Процентиль: 8%
0.00183
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-295