prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-311,CWE-310,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| prebuild-lwip_project | prebuild-lwip | * |