VYPR

Node Wixtoolset

by Node Wixtoolset Project

CVEs (1)

  • CVE-2016-10663HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker…