VYPR

Imageoptim

by Imageoptim Project

CVEs (1)

  • CVE-2016-10596HigJun 1, 2018
    risk 0.53cvss 8.1epss 0.01

    imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker…