Description
node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | node-bsdiff-android node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | node-bsdiff-android | <= 0.1.5 | — | GHSA-c2vr-2c89-ph88 |