← Back

Tgies

tgies

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Client Certificate Auth
client-certificate-auth
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-25651
1Tgies
1Client Certificate Auth
Jun 17, 2026
Feb 6, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middlewa...Show more
client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. This vulnerability is fixed in 1.0.0.Show less