Skip to content
OpenAdvisories
High CVE-2016-10630 EUVD-2019-0331GHSA-qjvf-rmwg-64fr

Downloads Resources over HTTP in install-g-test

Published Jun 1, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: HackerOne Product: install-g-test node module Package: install-g-test Ecosystem: npm

Description

install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

VendorProductAffectedFixed
HackerOne install-g-test node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm install-g-test <= 2.0.12 — GHSA-qjvf-rmwg-64fr

References