EUVD-2024-0934

Malicious code in bioql PyPI...

CVE-2024-29887

Serverpod is an app and web server, built for the Flutter and Dart ecosystem. This bug bypassed the validation of TSL certificates on all none web HTTP clients in the serverpodclient package. Making them susceptible to a man in the middle attack against encrypted traffic between the client device...

CVE-2024-29887 Serverpod client accepts any certificate

Serverpod is an app and web server, built for the Flutter and Dart ecosystem. This bug bypassed the validation of TSL certificates on all none web HTTP clients in the serverpodclient package. Making them susceptible to a man in the middle attack against encrypted traffic between the client device...

CVE-2024-29887

CVE-2024-29887 affects the Serverpod client component of Serverpod (serverpod_client), where TLS certificate validation is bypassed in non-web HTTP clients. The root cause is improper certificate validation, enabling potential man-in-the-middle attacks on encrypted traffic between client devices ...