Product · HackerOne

google-closure-tools-latest node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10677

Downloads Resources over HTTP in google-closure-tools-latest

google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause re…

HackerOne google-closure-tools-latest node module google-closure-tools-latest npm

Jun 4, 2018