brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| tiny-json-http(npm) | 1.0.1 | 7.0.0 | N/A |
CVSS Metrics