`xmlhttprequest-ssl`

Ecosystem:
npm

Package URL:
pkg:npm/xmlhttprequest-ssl

Total PRs:
24 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
22 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Improper Certificate Validation in xmlhttprequest-ssl

GHSA-72mh-269x-7mh5 CVE-2021-31597 CRITICAL published over 4 years ago • updated 29 days ago

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the proper...

xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection

GHSA-h4j5-c7cj-74xg CVE-2020-28502 CRITICAL published over 4 years ago • updated 3 months ago

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (`async=...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the npm_and_yarn group across 1 directory with 27 updates

perplext/streamlabs-obs #1

1.5.4 → 1.5.5 Patch PR

Open 24 days ago 1 comment

Package Details

Name:	`xmlhttprequest-ssl`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/xmlhttprequest-ssl`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 2

View All npm Advisories

Package Information

Description:

XMLHttpRequest for Node

Repository:	https://github.com/mjwwit/node-XMLHttpRequest
Homepage:	https://github.com/mjwwit/node-XMLHttpRequest#readme
Latest Release:	`4.0.0` 4 months ago
Dependent Repos:	1,076,748
Dependent Packages:	136
Downloads:	22,143,705
Ranking:	Top 0.0302% by dependent repos Top 0.066% by downloads Top 0.2947% by dependent pkgs

PR Status

Open 16 (66.7%)

Merged 4 (16.7%)

Closed 3 (12.5%)

PR Types

Removal 5 (20.8%)

Minor 7 (29.2%)

Major 3 (12.5%)