Skip to content
OpenAdvisories

Product · HackerOne

openframe-glslviewer node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10607

    Downloads Resources over HTTP in openframe-glslviewer

    openframe-glsviewer is a Openframe extension which adds support for shaders via glslViewer. openframe-glsviewer downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swappi…

    HackerOne openframe-glslviewer node module openframe-glslviewer npm