| Package | Affected versions | Patched versions |
|---|---|---|
| tweetstream | ≤ 2.6.1 | |
| tweetstream | = 2.6.1 |
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free