tocsin

CVE-2016-10570

1 advisory.

npm/pngcrush-installer CVE-2016-10570: high 8.1, EPSS 1.69%

pngcrush-installer downloads Resources over HTTP

Action: Upgrade pngcrush-installer to 1.8.10 or later.

npm i pngcrush-installer@1.8.10

Affected

introducedfixedlast affected
01.8.10-

Fixed versions

1.8.10

Sources

CVE-2016-10570 · published · modified · JSON