From b4ca7888787a0d34910f59c4a2135ad42fa8a796 Mon Sep 17 00:00:00 2001 From: Mohammed Keyvanzadeh Date: Sun, 23 Apr 2023 09:30:17 +0330 Subject: [PATCH] doc: fix typos in SECURITY.md PR-URL: https://github.com/nodejs/node/pull/47677 Reviewed-By: Daeyeon Jeong Reviewed-By: Deokjin Kim Reviewed-By: Luigi Pinca --- SECURITY.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 02c9f83aa32c1a..e815fbbd538217 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -126,7 +126,7 @@ lead to a loss of confidentiality, integrity, or availability. See . Any unexpected behavior from the data manipulation from Node.js Internal -functions may be considered a vulnerability if they are expoitable via +functions may be considered a vulnerability if they are exploitable via untrusted resources. In addition to addressing vulnerabilities based on the above, the project works @@ -144,7 +144,7 @@ the community they pose. #### Improper Certificate Validation (CWE-295) * Node.js provides APIs to validate handling of Subject Alternative Names (SANs) - in certficates used to connect to a TLS/SSL endpoint. If certificates can be + in certificates used to connect to a TLS/SSL endpoint. If certificates can be crafted which result in incorrect validation by the Node.js APIs that is considered a vulnerability.