Skip to content
OpenAdvisories

Product · HackerOne

adamvr-geoip-lite node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2016-10680

    Downloads Resources over HTTP in adamvr-geoip-lite

    adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data th…

    HackerOne adamvr-geoip-lite node module adamvr-geoip-lite npm