mjwwit/node-XMLHttpRequest

mjwwit/node-XMLHttpRequest

GitHubGitHub
GitHubgithub.com
thedanexperiment.comthedanexperiment.com
Releases21
Frequency8 months 3 days
Last Release
Stars14
XMLHttpRequest for node.js
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-31597↗
9.4 CRITICAL7.5 HIGH

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.