vulnerability

Alpine Linux: CVE-2021-22939: Improper Certificate Validation

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Aug 16, 2021

Added

Mar 26, 2024

Modified

Jun 18, 2026

Description

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.

Solutions

alpine-linux-upgrade-nodejsalpine-linux-upgrade-nodejs-current

References

CVE-2021-22939
https://attackerkb.com/topics/CVE-2021-22939
https://security.alpinelinux.org/vuln/CVE-2021-22939
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10068
CWE-295
EUVD-EUVD-2021-10068

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report