CVE-2016-10698

Summary: The connected advisories confirm that mystem-fix downloads binaries over HTTP, creating a MITM risk that could allow remote code execution if an attacker intercepts the binary. The GHSA entry explicitly states that affected versions insecurely download executables over HTTP, enabling pot...