wp-cli/wp-cli uses insecure certificate validation. The vulnerability exists due to an improper error handling in HTTPS requests management.
CPE | Name | Operator | Version |
---|---|---|---|
wp-cli/wp-cli | le | v2.4.1 |
github.com/advisories/GHSA-rwgm-f83r-v3qj
github.com/wp-cli/checksum-command/pull/86
github.com/wp-cli/config-command/pull/128
github.com/wp-cli/core-command/pull/186
github.com/wp-cli/extension-command/pull/287
github.com/wp-cli/package-command/pull/138
github.com/wp-cli/wp-cli/pull/5523
github.com/wp-cli/wp-cli/security/advisories/GHSA-rwgm-f83r-v3qj