Description
bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | bionode-sra node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | bionode-sra | <= 2.0.0 | — | GHSA-735c-r4vc-6gm9 |