tgies/client-certificate-auth

tgies/client-certificate-auth

GitHubGitHub
GitHubgithub.com
tgies.github.iotgies.github.io
Releases19
Frequency8 months 3 weeks
Last Release
Stars80
Node.js middleware and toolkit for client SSL certificate (mTLS) auth
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-25651↗
6.1 MEDIUM—

client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. This vulnerability is fixed in 1.0.0.