CVE-2018-1000096

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-13 · updated 2026-06-17
Weakness: CWE-295

Description

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.

Affected products

Tiny-Json-Http Project Tiny-Json-Http: from 1.0.0 through 7.0.0

References

https://github.com/brianleroux/tiny-json-http/pull/15
https://github.com/brianleroux/tiny-json-http/pull/15

Get alerted when CVE-2018-1000096 or the next vulnerability affects your stack