Количество 5
Количество 5
CVE-2021-31597
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.
CVE-2021-31597
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.
CVE-2021-31597
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.
CVE-2021-31597
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL c ...
GHSA-72mh-269x-7mh5
Improper Certificate Validation in xmlhttprequest-ssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-31597 The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected. | CVSS3: 9.4 | 0% Низкий | почти 5 лет назад |
 | CVE-2021-31597 The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected. | CVSS3: 9.4 | 0% Низкий | почти 5 лет назад |
 | CVE-2021-31597 The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected. | CVSS3: 9.4 | 0% Низкий | почти 5 лет назад |
| CVE-2021-31597 The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL c ... | CVSS3: 9.4 | 0% Низкий | почти 5 лет назад |
| GHSA-72mh-269x-7mh5 Improper Certificate Validation in xmlhttprequest-ssl | CVSS3: 9.4 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу