Skip to content
OpenAdvisories

Product · HackerOne

ipip-coffee node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10673

    ipip-coffee downloads Resources over HTTP

    ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an …

    HackerOne ipip-coffee node module ipip-coffee npm