CVE-2016-10652 | BDVDB-2026-101590 Detail

HackerOneprebuild-lwip node module

Description#

prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-311 Missing Encryption of Sensitive Data (CWE-311)

References#

https://nodesecurity.io/advisories/248

Exploit#

No public exploit known

History#

Version 12018-06-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.