Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-777r-4cwx-g26v

Опубликовано: 30 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.

This vulnerability affects Node.js 26.x, 24.x, and 22.x.

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.

This vulnerability affects Node.js 26.x, 24.x, and 22.x.

EPSS

Процентиль: 0%
0.00084
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 4.4
ubuntu
около 2 месяцев назад

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

CVSS3: 4.1
redhat
около 2 месяцев назад

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

CVSS3: 4.4
nvd
около 2 месяцев назад

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

CVSS3: 4.1
msrc
около 1 месяца назад

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

CVSS3: 4.4
debian
около 2 месяцев назад

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-ar ...

EPSS

Процентиль: 0%
0.00084
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-287