CVE-2018-1000096

2018-03-1301:29:00

Google

osv.dev

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.

CPENameOperatorVersion
tiny-json-httpeq6.2.0
tiny-json-httpeq5.2.0
tiny-json-httpeq5.3.2
tiny-json-httpeq5.1.1
tiny-json-httpeq5.0.2
tiny-json-httpeq6.0.1
tiny-json-httpeq5.1.2
tiny-json-httpeq7.0.0
tiny-json-httpeq5.3.1
tiny-json-httpeq5.0.0

Name	Operator	Version
tiny-json-http	eq	6.2.0
tiny-json-http	eq	5.2.0
tiny-json-http	eq	5.3.2
tiny-json-http	eq	5.1.1
tiny-json-http	eq	5.0.2
tiny-json-http	eq	6.0.1
tiny-json-http	eq	5.1.2
tiny-json-http	eq	7.0.0
tiny-json-http	eq	5.3.1
tiny-json-http	eq	5.0.0