Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-7110
4.3
MEDIUMCVSS v2
Published
May 2, 2014
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.
transifex
NPMNodeJS Transifex API Client
NPMNodeJS Transifex API Client= 0.5, = 0.3, = 0.1, = 0.8, = 0.2, = 0.6, <= 0.9, = 0.4, = 0.7NVD
GitHub