https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:20:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-10996 bdu:2026-10996 https://cve.radiocsirt.org/vuln/bdu:2026-10996 https://cve.radiocsirt.org/vuln/certfr-2022-avi-351 certfr-2022-avi-351 https://cve.radiocsirt.org/vuln/certfr-2022-avi-351 https://cve.radiocsirt.org/vuln/euvd-2026-27543 EUVD-2026-27543 https://cve.radiocsirt.org/vuln/euvd-2026-27543 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31597 <p>The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.</p> <p>The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31597 https://cve.radiocsirt.org/vuln/ghsa-72mh-269x-7mh5 <p><strong>Affected:</strong> npm: xmlhttprequest-ssl</p> <p>The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.</p> <p><strong>Affected:</strong> npm: xmlhttprequest-ssl</p> <p>The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.</p> https://cve.radiocsirt.org/vuln/ghsa-72mh-269x-7mh5 https://cve.radiocsirt.org/vuln/gsd-2021-31597 gsd-2021-31597 https://cve.radiocsirt.org/vuln/gsd-2021-31597 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31597 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-xmlhttprequest-ssl, Ubuntu:20.04:LTS: node-xmlhttprequest-ssl</p> <p>The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-xmlhttprequest-ssl, Ubuntu:20.04:LTS: node-xmlhttprequest-ssl</p> <p>The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31597 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1229 <p>Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1229