Product · HackerOne

dalek-browser-chrome-canary node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10584

Downloads Resources over HTTP in dalek-browser-chrome-canary

dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the …

HackerOne dalek-browser-chrome-canary node module dalek-browser-chrome-canary Browsers npm

May 29, 2018