← Back

Xmlhttprequest Ssl

xmlhttprequest-ssl

Vendor: Xmlhttprequest Ssl Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-31597
1Xmlhttprequest Ssl Project
1Xmlhttprequest Ssl
Jun 17, 2026
Apr 23, 2021
N/A· v4
9.4 CRITICAL· v3
7.5 HIGH· v2
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.re...Show more
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.Show less