cvedb.io
CVE-2018-1000096
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2018-03-13T01:29:00.907 · Last modified 2026-06-17T01:32:25.170

Summary

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.

Affected products

tiny-json-http_project — tiny-json-http

Does this affect you?

Add your gear to cvedb and we'll alert you only when tiny-json-http_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.