libsbmlsim (>=0.0.1, <=0.0.2) potentially affected by CVE-2016-10668 via libsbml (0.0.2)

libsbml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on libsbml and may be impacted: - libsbmlsim =0.0.1, =0.0.2 Source cves: CVE-2016-10668 Source advisory: OSV:GHSA-432J-4FW9-2G6F...

CVE-2016-10668

libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the...

CVE-2016-10668

libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the...