tocsin

npm/closure-util CVE-2016-10583: high 8.1, EPSS 2.51%

closure-util downloads Resources over HTTP

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-2.0.0-beta.1

Fixed versions

No fixed version in the source.

Sources

CVE-2016-10583 · published · modified · JSON