Skip to content
OpenAdvisories

Package · npm

client-certificate-auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-25651

    client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect

    client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP reque…

    tgies client-certificate-auth client-certificate-auth npm