Skip to content
OpenAdvisories

Package · Debian

transifex-client

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Transifex command-line client has improper certificate validation

    Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an inco…