Skip to content
OpenAdvisories
High · 8.1 CVE-2016-10618 EUVD-2019-0265GHSA-8r98-rqg5-4vm3

node-browser downloads Resources over HTTP

Published Jun 1, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Vendor: HackerOne Product: node-browser node module Package: node-browser Ecosystem: npm

Description

node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

VendorProductAffectedFixed
HackerOne node-browser node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm node-browser <= 0.0.3 — GHSA-8r98-rqg5-4vm3

References