Skip to content
OpenAdvisories

Package · npm

haxeshim

1 known vulnerabilities.

1 result · Feed

  • High 8.1

    Downloads Resources over HTTP in haxeshim

    haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlle…