Skip to content
OpenAdvisories

Product · HackerOne

broccoli-closure node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10635

    Downloads Resources over HTTP in broccoli-closure

    broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested b…

    HackerOne broccoli-closure node module broccoli-closure npm