Skip to content
OpenAdvisories
High CVE-2016-10654 EUVD-2019-0230GHSA-5q5w-mf87-57x4

Downloads Resources over HTTP in sfml

Published Jun 4, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Vendor: HackerOne Product: sfml node module Package: sfml Ecosystem: npm

Description

sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

VendorProductAffectedFixed
HackerOne sfml node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm sfml <= 0.0.3 — GHSA-5q5w-mf87-57x4

References