kevinsawicki/http-request Missing certificate validation

2022-05-2422:00:16

Google

osv.dev

0.001 Low

EPSS

Percentile

36.1%

JSON

OSS Http Request (kevinsawicki/http-request) is missing SSL/TLS certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

CPENameOperatorVersion
com.github.kevinsawicki:http-requesteq4.2
com.github.kevinsawicki:http-requesteq1.0
com.github.kevinsawicki:http-requesteq1.1
com.github.kevinsawicki:http-requesteq5.4.1
com.github.kevinsawicki:http-requesteq5.0
com.github.kevinsawicki:http-requesteq5.4
com.github.kevinsawicki:http-requesteq5.2
com.github.kevinsawicki:http-requesteq0.1
com.github.kevinsawicki:http-requesteq3.0
com.github.kevinsawicki:http-requesteq2.2

Name	Operator	Version
com.github.kevinsawicki:http-request	eq	4.2
com.github.kevinsawicki:http-request	eq	1.0
com.github.kevinsawicki:http-request	eq	1.1
com.github.kevinsawicki:http-request	eq	5.4.1
com.github.kevinsawicki:http-request	eq	5.0
com.github.kevinsawicki:http-request	eq	5.4
com.github.kevinsawicki:http-request	eq	5.2
com.github.kevinsawicki:http-request	eq	0.1
com.github.kevinsawicki:http-request	eq	3.0
com.github.kevinsawicki:http-request	eq	2.2