Non évaluée
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a ma...
CVE-2020-24393
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- package github.com
- report securitylab.github.com