Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-7099
4.3
MEDIUMCVSS v2
Published
October 10, 2016
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
GitHub
nodejsPython Package IndexPython bindings and utils for Node.js and io.js
Python Package IndexPython bindings and utils for Node.js and io.js= 0.10.9, = 0.10.11, = 0.10.21, = 0.10.4, = 0.10.41, = 0.10.20, = 0.10.18, = 0.10.39, = 0.10.29, = 0.10.40, = 0.10.32, = 0.10.25, = 0.10.36, = 0.10.15, = 0.10.14, = 0.10.43, = 0.10.5, = 0.10.35, = 0.10.27, = 0.10.2, = 0.10.19, = 0.10.46, = 0.10.38, = 0.10.31, = 0.10.30, = 0.10.24, = 0.10.16, = 0.10.44, = 0.10.45, = 0.10.33, = 0.10.26, = 0.10.17, = 0.10.10, = 0.10.8, = 0.10.7, = 0.10.6, = 0.10.37, = 0.10.3, = 0.10.42, = 0.10.34, = 0.10.28, = 0.10.13, = 0.10.12, = 0.10.23, = 0.10.22, = 0.10.16-isaacs-manual, = 0.10.1, = 0.10.0, = 6.0.0, = 6.2.0, = 6.3.0, = 6.4.0, = 6.1.0, = 6.2.2, = 6.3.1, = 6.6.0, = 6.2.1, = 6.5.0, = 0.12.15, = 0.12.4, = 0.12.7, = 0.12.13, = 0.12.1, = 0.12.14, = 0.12.2, = 0.12.12, = 0.12.5, = 0.12.10, = 0.12.8, = 0.12.0, = 0.12.3, = 0.12.9, = 0.12.11, = 0.12.6, = 4.3.0, = 4.0.0, = 4.5.0, = 4.3.2, = 4.4.4, = 4.3.1, = 4.4.2, = 4.1.1, = 4.2.3, = 4.4.5, = 4.2.2, = 4.4.0, = 4.4.1, = 4.2.6, = 4.1.2, = 4.4.3, = 4.2.5, = 4.2.4, = 4.1.0, = 4.4.6, = 4.4.7, = 4.2.1, = 4.2.0
NPM
NuGet Gallery