web_gateway vulnerabilities
CVEs whose affected-version data names the web_gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2021-3449Medium· 5.9PoCAn OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHel…
▾ Twilightopenssl · opensslEPSS 64%via NVD
CVE-2021-3450High· 7.4PoCThe X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that hav…
▾ Midnightopenssl · opensslEPSS 18%via NVD