Skip to content
OpenAdvisories

Package · npm

ibm_db

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.0
    GHSA-p77h-hv6g-fmfp

    Sensitive Data Exposure in ibm_db

    Versions of `ibm_db` prior to 2.6.0 are vulnerable to Sensitive Data Exposure. The package printed database credentials in plaintext in logs while in debug mode. ## Recommendation Upgrade to version 2.6.0 or later and ensure sensitive information was not logg…

    ibm_db npm
  • High 8.1
    CVE-2016-10577

    ibm_db downloads Resources over HTTP

    ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping …

    HackerOne ibm_db node module ibm_db npm