TI-2016-08718 CVE-2016-10677 · GHSA-69r7-cw26-px6hCryptographic flaw in HackerOne google-closure-tools-latest node modulePriority LOW 39google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM…CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.01725 · Published 2018-06-04 · No fix listed CWE-311