Skip to content
OpenAdvisories
High CVE-2017-16041 EUVD-2018-0329GHSA-w23f-f3c5-r9qh

ikst Downloads Resources over HTTP

Published Jun 4, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: HackerOne Product: ikst node module Package: ikst Ecosystem: npm

Description

ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

VendorProductAffectedFixed
HackerOne ikst node module <1.1.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm ikst < 1.1.2 1.1.2 GHSA-w23f-f3c5-r9qh

References