Skip to content
OpenAdvisories

Product · HackerOne

ipip node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2016-10594

    ipip downloads Resources over HTTP

    ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne ipip node module ipip npm