GHSA-6hrm-jqp3-64cvMediumCVSS 5.9

Improper Certificate Validation in TweetStream

Published
April 13, 2021
Last Modified
January 26, 2023

🔗 CVE IDs covered (1)

📋 Description

TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.

🎯 Affected products1

  • rubygems/tweetstream:<= 2.6.1

🔗 References (3)