`xmlhttprequest-ssl`

Ecosystem:
npm

Package URL:
pkg:npm/xmlhttprequest-ssl

Total PRs:
27 Dependabot PRs

Latest PR:
29 days ago

Unique Repositories:
25 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Improper Certificate Validation in xmlhttprequest-ssl

GHSA-72mh-269x-7mh5 CVE-2021-31597 CRITICAL published over 4 years ago • updated 3 months ago

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the proper...

xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection

GHSA-h4j5-c7cj-74xg CVE-2020-28502 CRITICAL published over 4 years ago • updated 5 months ago

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (`async=...

Recent PRs (filtered by: Closed , Patch PRs )

RSS Feed Clear filter

No PRs Found

No Dependabot PRs found for this package.

Package Details

Name:	`xmlhttprequest-ssl`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/xmlhttprequest-ssl`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 2

View All npm Advisories

Package Information

Description:

XMLHttpRequest for Node

Repository:	https://github.com/mjwwit/node-XMLHttpRequest
Homepage:	https://github.com/mjwwit/node-XMLHttpRequest#readme
Latest Release:	`4.0.0` 6 months ago
Dependent Repos:	1,076,748
Dependent Packages:	136
Downloads:	22,143,705
Ranking:	Top 0.0302% by dependent repos Top 0.066% by downloads Top 0.2947% by dependent pkgs

PR Status

Open 17 (63.0%)

Merged 5 (18.5%)

Closed 4 (14.8%)

PR Types

Removal 6 (22.2%)

Minor 8 (29.6%)

Major 4 (14.8%)