bio (>=0.0.2 <=0.0.5), bionode (>=0.7.0 <=2.0.0) +1 more potentially affected by CVE-2016-10613 via bionode-sra (>=0.2.5 <=1.0.3)

bionode-sra NPM version =0.2.5, =0.0.2, =0.7.0, =3.3.5, =3.4.5 Source cves: CVE-2016-10613 Source advisory: OSV:GHSA-735C-R4VC-6GM9...

CVE-2016-10613

bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10613

Summary (CVE-2016-10613) : The bionode-sra Node.js wrapper for the SRA Toolkit downloads data over HTTP, creating susceptibility to man-in-the-middle (MitM) attacks when an attacker can position themselves on the network. The issue arises from not preventing HTTP downloads of resources (including...