Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch the checkServerIdentity function in lib/tls.js. An attacker can cause a TLS client to accept a certificate that does not identify the connected peer by supplying a non-canonical...