Skip to content
OpenAdvisories

Product · HackerOne

install-nw node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10566

    install-nw downloads Resources over HTTP

    install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping o…

    HackerOne install-nw node module install-nw npm