p PatchFirst

PatchFirst · Latest vulnerabilities

client-certificate-auth vulnerabilities

Vulnerabilities published for client-certificate-auth in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-25651

    Medium · CVSS 6.1EPSS 0.18%Fix available

    client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect

    client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. This vulnerability is fixed in 1.0.0.

    client-certificate-authNode.js
    • Update to 1.0.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →