MediumCVSS 5.8
EPSS 0.81%
obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.