Rule Explorer

Missing verification of SCRAM channel binding negotiation or empty channel binding data. This allows a silent downgrade attack, where man-in-the-middle protection is lost if the server certificate signature algorithm (e.g., Ed25519) does not support a channel binding hash. Ensure that you check `.isPlus()` on the negotiated SCRAM mechanism when channel bindi

JavaCVE-2026-54291CWE-290CWE-300

The code checks for the 'STARTTLS' capability and silently returns or passes if it is missing. This enables a STRIPTLS attack, where a Man-In-The-Middle (MitM) attacker intercepts the initial connection and removes 'STARTTLS' from the server's capabilities response. The application will silently downgrade to a cleartext connection, exposing sensitive informa

PythonCVE-2020-37248CWE-300CWE-319