From 16c2a56e7f3e691fce859d80beb92e5f736d2ea1 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 13 Sep 2023 22:20:51 +0000 Subject: [PATCH] Publish GHSA-7h42-5vj2-cq39 --- .../GHSA-7h42-5vj2-cq39/GHSA-7h42-5vj2-cq39.json | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2018/03/GHSA-7h42-5vj2-cq39/GHSA-7h42-5vj2-cq39.json b/advisories/github-reviewed/2018/03/GHSA-7h42-5vj2-cq39/GHSA-7h42-5vj2-cq39.json index 77aa2de1c0b..c5486282abb 100644 --- a/advisories/github-reviewed/2018/03/GHSA-7h42-5vj2-cq39/GHSA-7h42-5vj2-cq39.json +++ b/advisories/github-reviewed/2018/03/GHSA-7h42-5vj2-cq39/GHSA-7h42-5vj2-cq39.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-7h42-5vj2-cq39", - "modified": "2021-09-03T17:41:03Z", + "modified": "2023-09-13T22:19:39Z", "published": "2018-03-13T20:42:00Z", "aliases": [ "CVE-2018-1000096" ], - "summary": "High severity vulnerability that affects tiny-json-http", - "details": "brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.", + "summary": "tiny-json-http missing SSL certificate validation", + "details": "brianleroux tiny-json-http version all versions since commit [9b8e74a232bba4701844e07bcba794173b0238a8](https://github.com/brianleroux/tiny-json-http/commit/9b8e74a232bba4701844e07bcba794173b0238a8) (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.", "severity": [ { "type": "CVSS_V3", @@ -20,6 +20,11 @@ "ecosystem": "npm", "name": "tiny-json-http" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -44,6 +49,10 @@ "type": "WEB", "url": "https://github.com/brianleroux/tiny-json-http/pull/15" }, + { + "type": "WEB", + "url": "https://github.com/brianleroux/tiny-json-http/commit/3c1e36d8bef3ef5fd8e4447f816d5ffe2bfc3190" + }, { "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-7h42-5vj2-cq39"