CVE-2016-10652

HackerOne / prebuild-lwip node module PUBLISHED

Description (CNA)

prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected (CNA)

Vendor / product	Versions
HackerOne / prebuild-lwip node module	affected All versions

CWE

CWE-311

References

https://nodesecurity.io/advisories/248

ADP enrichment

CVE

No English description supplied.

https://nodesecurity.io/advisories/248