Skip to content
OpenAdvisories

Package · npm

roslib-socketio

1 known vulnerabilities.

1 result · Feed

  • High 8.1

    Downloads Resources over HTTP in roslib-socketio

    roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out t…