WS-2016-0052

"Node-krb5 is a node.js native add-on for simple krb5 user authentication.This module does not validate the KDC, which might allow an attacker with network access and enough time to spoof the KDC and impersonate a valid user without knowing their credentials."...

PT-2020-7943

Name of the Vulnerable Software and Affected Versions: node-krb5 affected versions not specified Description: The issue concerns the lack of validation of the KDC prior to authentication in affected versions, potentially allowing an attacker with network access to spoof the KDC and impersonate a...