Product · HackerOne

geoip-lite-country node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10568

Downloads Resources over HTTP in geoip-lite-country

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

HackerOne geoip-lite-country node module geoip-lite-country npm

May 29, 2018