Skip to content
OpenAdvisories

Package · npm

ipip-coffee

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2016-10673

    ipip-coffee downloads Resources over HTTP

    ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an …

    HackerOne ipip-coffee node module ipip-coffee npm