Lucene search
+L

8 matches found

EUVD
EUVD
•added 2026/10/05 12:30 a.m.•30 views

EUVD-2026-92135

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

9.1CVSS5.9AI score0.00189EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/04 11:16 p.m.•22 views

CVE-2026-105222

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

9.1CVSS0.00189EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/04 10:31 p.m.•21 views

CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

9.1CVSS5.9AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/04 10:31 p.m.•17 views

CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

9.1CVSS5.9AI score0.00189EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/04 10:31 p.m.•33 views

CVE-2026-105222

The alexpechkarev/google-maps Laravel package, through version 12.16 , is vulnerable to a Disabled TLS Certificate Verification flaw. The bundled configuration sets ssl_verify_peer to FALSE , which is then passed to CURLOPT_SSL_VERIFYPEER. This allows on-path attackers to present arbitrary certif...

9.1CVSS5.9AI score0.00189EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/04 10:31 p.m.•51 views

CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

9.1CVSS0.00189EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/04 12:00 a.m.•15 views

CVE-2026-105222: Improper Certificate Validation

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

9.1CVSS5.9AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/04 12:00 a.m.•17 views

PT-2026-104656

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl verify peer to FALSE, which is passed to CURLOPT SSL VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service...

9.1CVSS5.9AI score0.00189EPSS
SaveExploits0References7
Rows per page
Query Builder