Product · HackerOne

pennyworth node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10619

Downloads Resources over HTTP in pennyworth

pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

HackerOne pennyworth node module pennyworth npm

Jun 1, 2018