| Package | Affected versions | Patched versions |
|---|---|---|
| osquery | > 2.9.0, < 4.2.0 | 4.2.0 |
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free