CVE-2026-25651
CVE-2026-25651 · client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect
This page contains facts from public vulnerability sources. Check the original advisory before updating.
client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. This vulnerability is fixed in 1.0.0.
CVSS 6.1 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
client-certificate-auth
- Versions
- >= 0.2.1, < 1.0.0: Affected
No fix published
client-certificate-auth npm
- Affected ranges
- SEMVER: ≥ 0.2.1, < 1.0.0
Update to 1.0.0