npm/xmlhttprequest-ssl CVE-2021-31597: critical 9.4, EPSS 2.04%
Improper Certificate Validation in xmlhttprequest-ssl
Action: Upgrade xmlhttprequest-ssl to 1.6.1 or later.
npm i xmlhttprequest-ssl@1.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.1 | - |
Fixed versions
| 1.6.1 |
Sources
- osv: GHSA-72mh-269x-7mh5
- https://nvd.nist.gov/vuln/detail/CVE-2021-31597
- https://github.com/mjwwit/node-XMLHttpRequest/commit/bf53329b61ca6afc5d28f6b8d2dc2e3ca740a9b2
- https://github.com/mjwwit/node-XMLHttpRequest/compare/v1.6.0...1.6.1
- https://people.kingsds.network/wesgarland/xmlhttprequest-ssl-vuln.txt
- https://security.netapp.com/advisory/ntap-20210618-0004
CVE-2021-31597 · published · modified · JSON