Skip to content
OpenAdvisories

Product · HackerOne

mystem-fix node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10698

    Downloads Resources over HTTP in mystem-fix

    mystem-fix is a node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem-fix downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested…

    HackerOne mystem-fix node module mystem-fix npm