fs2 vulnerabilities

1 known vulnerability in fs2 from Typelevel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  fs2: Improper Certificate Validation

  CVE-2022-31183Aug 1, 2022Typelevel

  fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode `TLSSocket` using `fs2-io` on Node.js, the parameter `requestCert = true` is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerabil