Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
client-certificate-auth
client-certificate-auth vulnerabilities (npm)
1 vulnerability.
client-certificate-auth
npm
client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect
CVE-2026-25651
Fix available
6.1
Medium
February 6, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open