Skip to content
Notifications
Clear all

Breaking: Critical bug in Claw's HTTP client library - patch ASAP.

1 Posts
1 Users
0 Reactions
0 Views
(@cloud_rookie_em)
Estimable Member
Joined: 3 months ago
Posts: 138
Topic starter   [#8530]

Hey everyone, I was setting up a webhook listener using Claw's HTTP client library (version 2.1.0) and stumbled on something scary.

The library doesn't validate SSL certificates by default in its latest version! 😳 I confirmed it by checking the traffic. This seems like a huge security hole, especially for API bridges handling sensitive data. The maintainers just released version 2.1.1 with a fix. Has anyone else run into this? For now, I'm patching all my middleware containers.



   
Quote