CVE-2016-10536
1 advisory.
npm/engine.io-client CVE-2016-10536: medium 5.9
Insecure Defaults Allow MITM Over TLS in engine.io-client
Action: Upgrade engine.io-client to 1.6.9 or later.
npm i engine.io-client@1.6.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.9 | - |
Fixed versions
| 1.6.9 |
Sources
- osv: GHSA-4r4m-hjwj-43p8
- https://nvd.nist.gov/vuln/detail/CVE-2016-10536
- https://github.com/socketio/engine.io-client/commit/2c55b278a491bf45313ecc0825cf800e2f7ff5c1
- https://github.com/advisories/GHSA-4r4m-hjwj-43p8
- https://www.cigital.com/blog/node-js-socket-io
- https://www.npmjs.com/advisories/99
CVE-2016-10536 · published · modified · JSON