Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.26 views

Downloads Resources over HTTP in imageoptim

imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested tarball with an attacker controlled tarball if t...

8.1CVSS1.6AI score0.01069EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder