VulnerabilityAnalyzed

CVE-2026-25651

Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability.

MEDIUM 6.1EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. This vulnerability is fixed in 1.0.0.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.17% probability · 7th percentile
CISA KEV: Not listed
Weakness: CWE-601
Affected: tgies/client-certificate-auth
Source: security-advisories@github.com

References

https://github.com/tgies/client-certificate-auth/releases/tag/v1.0.0Release Notes
https://github.com/tgies/client-certificate-auth/security/advisories/GHSA-m4w9-gch5-c2g4Exploit, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.