Description
openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | openframe-image node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openframe-image | <= 0.2.3 | — | GHSA-mgr2-3mpv-43gc |