CVE-2016-10652

Publication date

2018-06-04 16:00:00

Family

hackerone

State

PUBLISHED

Description

prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.