VYPR

npm package

dalek-browser-chrome-canary

pkg:npm/dalek-browser-chrome-canary

Vulnerabilities (1)

  • CVE-2016-10584HigMay 29, 2018
    affected <= 0.0.10-2014-03-24-17-36-27

    dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with