https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:16:16.200621+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-7099 CVE-2016-7099 2026-10-03T14:16:16.214741+00:00

The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.