Skip to content
OpenAdvisories

Product · HackerOne

baryton-saxophone node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10573

    Downloads Resources over HTTP in baryton-saxophone

    baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows. baryton-saxophone versions below 3.0.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code exe…

    HackerOne baryton-saxophone node module baryton-saxophone npm