CVE-2018-1000096

npm/tiny-json-http CVE-2018-1000096: high 8.1

tiny-json-http missing SSL certificate validation

Action: Upgrade tiny-json-http to 7.0.0 or later.

npm i tiny-json-http@7.0.0

Affected

Fixed versions

Sources

• osv: GHSA-7h42-5vj2-cq39
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000096
• https://github.com/brianleroux/tiny-json-http/pull/15
• https://github.com/brianleroux/tiny-json-http/commit/3c1e36d8bef3ef5fd8e4447f816d5ffe2bfc3190
• https://github.com/advisories/GHSA-7h42-5vj2-cq39
• https://github.com/brianleroux/tiny-json-http

CVE-2018-1000096 · published 2018-03-13T20:42:00Z · modified 2023-11-08T03:59:34.526312Z · JSON