Search for packages
| purl | pkg:npm/dalek-browser-ie@0.0.5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GMS-2017-94
|
Downloads Resources over HTTP dalek-browser-ie downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be … | There are no reported fixed by versions. |
|
GHSA-65q2-x652-xx84
Aliases: CVE-2016-10605 |
dalek-browser-ie downloads Resources over HTTP Affected versions of `dalek-browser-ie` insecurely download an executable over an unencrypted HTTP connection. In scenarios … | There are no reported fixed by versions. |