Publish GHSA-7h42-5vj2-cq39

This commit is contained in:
advisory-database[bot]
2023-09-13 22:20:51 +00:00
parent c9e43e624f
commit 16c2a56e7f
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7h42-5vj2-cq39",
"modified": "2021-09-03T17:41:03Z",
"modified": "2023-09-13T22:19:39Z",
"published": "2018-03-13T20:42:00Z",
"aliases": [
"CVE-2018-1000096"
],
"summary": "High severity vulnerability that affects tiny-json-http",
"details": "brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.",
"summary": "tiny-json-http missing SSL certificate validation",
"details": "brianleroux tiny-json-http version all versions since commit [9b8e74a232bba4701844e07bcba794173b0238a8](https://github.com/brianleroux/tiny-json-http/commit/9b8e74a232bba4701844e07bcba794173b0238a8) (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.",
"severity": [
{
"type": "CVSS_V3",
@@ -20,6 +20,11 @@
"ecosystem": "npm",
"name": "tiny-json-http"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -44,6 +49,10 @@
"type": "WEB",
"url": "https://github.com/brianleroux/tiny-json-http/pull/15"
},
{
"type": "WEB",
"url": "https://github.com/brianleroux/tiny-json-http/commit/3c1e36d8bef3ef5fd8e4447f816d5ffe2bfc3190"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-7h42-5vj2-cq39"