Improper Neutralization

Overview net.minidev:json-smart is a Java JSON parser. Affected versions of this package are vulnerable to Improper Neutralization via the parseInner function in the JSONParserBase parser. An attacker can evade JSONValue.parseStrict or isValidJsonStrict by sending a valid JSON value followed by a...

openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

A flaw was found in openssl. The flag that enables additional security checks of certificates present in a certificate chain was not enabled allowing a confirmation step to verify that certificates in the chain are valid CA certificates is bypassed. The highest threat from this vulnerability is t...