Skip to content
OpenAdvisories

Product · HackerOne

roslib-socketio node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10681

    Downloads Resources over HTTP in roslib-socketio

    roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out t…

    HackerOne roslib-socketio node module roslib-socketio npm