Description
jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | jser-stat node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | jser-stat | <= 4.0.3 | — | GHSA-5w4p-h4gm-3w26 |