GHSA-8mx3-gp3p-vgg7
kevinsawicki/http-request Missing certificate validation
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.github.kevinsawicki:http-request | <= 6.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
OSS Http Request (kevinsawicki/http-request) is missing SSL/TLS certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.
References
External links from the advisory. They lead to third-party sites.