~ / search / GHSA-q6cq-m9gm-6q2f

GHSA-q6cq-m9gm-6q2f

Slixmpp lacks SSL Certificate hostname validation in XMLStream

Source: GitHub Advisory Database (reviewed) High CVE-2022-45197

Packages

EcosystemPackageAffectedFixed in
PyPI slixmpp < 1.8.3 1.8.3

Details

As written in the advisory (Markdown source, shown as plain text).

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.

References

External links from the advisory. They lead to third-party sites.