Read the docs

Xmlhttprequest-ssl Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Xmlhttprequest-ssl Project records in CISA KEV

No Xmlhttprequest-ssl Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xmlhttprequest-ssl 1 record MEDIUM

Records

1 record in Xmlhttprequest-ssl · all components

TI-2021-11697 CVE-2021-31597 · GHSA-72mh-269x-7mh5

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate…

Priority MEDIUM 44

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.re…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.02039 Published 2021-04-22 Partial fix · 1.6.1 CWE-295
Open these records in search →