| Package | Affected versions | Patched versions |
|---|---|---|
| tiny-json-http | ≥ 1.0.0, ≤ 7.0.0 | |
| tiny-json-http | ≥ 1.0.1, < 7.0.0 | 7.0.0 |
brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free