Skip to content

Conversation

@schniggie
Copy link

Fixes insecure downgrade to http-only:

curl -I https://mirror.cveb.in/nvd/json/cve/1.1
HTTP/1.1 301 Moved Permanently
server: nginx/1.28.0
date: Tue, 21 Oct 2025 08:25:02 GMT
content-type: text/html
content-length: 169
location: http://mirror.cveb.in/nvd/json/cve/1.1/

vs.

curl -I https://mirror.cveb.in/nvd/json/cve/1.1/
HTTP/1.1 200 OK
server: nginx/1.28.0
date: Tue, 21 Oct 2025 08:24:54 GMT
content-type: text/html

Fixes insecure downgrade to http-only:

curl -I https://mirror.cveb.in/nvd/json/cve/1.1 
HTTP/1.1 301 Moved Permanently
server: nginx/1.28.0
date: Tue, 21 Oct 2025 08:25:02 GMT
content-type: text/html
content-length: 169
location: http://mirror.cveb.in/nvd/json/cve/1.1/

vs.

curl -I https://mirror.cveb.in/nvd/json/cve/1.1/
HTTP/1.1 200 OK
server: nginx/1.28.0
date: Tue, 21 Oct 2025 08:24:54 GMT
content-type: text/html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant