Skip to content
OpenAdvisories

Vendor

typelevel

6 known vulnerabilities.

Products

jawn 3 fs2 2 grackle 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2022-31183

    mTLS client verification is skipped in fs2 on Node.js

    fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode `TLSSocket` using `fs2-io` on Node.js, the parameter `requestCert = true` is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerabi…

    typelevel fs2 co.fs2:fs2-io_2.12 co.fs2:fs2-io_2.13 Maven