TI-2016-08718 CVE-2016-10677 · GHSA-69r7-cw26-px6h
Cryptographic flaw in HackerOne google-closure-tools-latest node module
Priority LOW 39
google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM…