mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish GHSA-7h42-5vj2-cq39
This commit is contained in:
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7h42-5vj2-cq39",
|
||||
"modified": "2021-09-03T17:41:03Z",
|
||||
"modified": "2023-09-13T22:19:39Z",
|
||||
"published": "2018-03-13T20:42:00Z",
|
||||
"aliases": [
|
||||
"CVE-2018-1000096"
|
||||
],
|
||||
"summary": "High severity vulnerability that affects tiny-json-http",
|
||||
"details": "brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.",
|
||||
"summary": "tiny-json-http missing SSL certificate validation",
|
||||
"details": "brianleroux tiny-json-http version all versions since commit [9b8e74a232bba4701844e07bcba794173b0238a8](https://github.com/brianleroux/tiny-json-http/commit/9b8e74a232bba4701844e07bcba794173b0238a8) (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
@@ -20,6 +20,11 @@
|
||||
"ecosystem": "npm",
|
||||
"name": "tiny-json-http"
|
||||
},
|
||||
"ecosystem_specific": {
|
||||
"affected_functions": [
|
||||
""
|
||||
]
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
@@ -44,6 +49,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/brianleroux/tiny-json-http/pull/15"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/brianleroux/tiny-json-http/commit/3c1e36d8bef3ef5fd8e4447f816d5ffe2bfc3190"
|
||||
},
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://github.com/advisories/GHSA-7h42-5vj2-cq39"
|
||||
|
||||
Reference in New Issue
Block a user