Skip to content
OpenAdvisories

Product · HackerOne

slimerjs-edge node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10644

    slimerjs-edge downloads Resources over HTTP

    slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs. slimerjs-edge downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the re…

    HackerOne slimerjs-edge node module slimerjs-edge Browsers npm