Product · HackerOne

react-native-baidu-voice-synthesizer node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10697

Downloads Resources over HTTP in react-native-baidu-voice-synthesizer

react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) …

HackerOne react-native-baidu-voice-synthesizer node module react-native-baidu-voice-synthesizer npm

Jun 4, 2018