1 matches found
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the verify... method of BoringSSLCertificateVerifyCallback, which for a plain X509TrustManager invokes only the two-argument checkServerTrustedchain, authType overload, dropping the QuicheQuicSslEngine...
8.7CVSS7.1AI score0.00721EPSS
SaveExploits0References2
20