GHSA-6hrm-jqp3-64cvMediumCVSS 5.9
Improper Certificate Validation in TweetStream
🔗 CVE IDs covered (1)
📋 Description
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
🎯 Affected products1
- rubygems/tweetstream:<= 2.6.1