Xmlhttprequest-Ssl Project Xmlhttprequest-Ssl
1 CVEs affecting Xmlhttprequest-Ssl Project Xmlhttprequest-Ssl. Latest disclosed: 2021-04-23. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-31597 | Critical | 9.4 | 2021-04-23 | The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists bu… |