Skip to content
OpenAdvisories

Product · HackerOne

alto-saxophone node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10694

    Downloads Resources over HTTP in alto-saxophone

    alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2.25.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (R…

    HackerOne alto-saxophone node module alto-saxophone npm