Skip to content

Vendor

cue-sdk-node project vulnerabilities

1 published CVE affecting cue-sdk-node project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of cue-sdk-node project alerts

Products

Latest cue-sdk-node project CVEs

Newest publication first

  1. CVE-2016-10590 Downloads Resources over HTTP in cue-sdk-node

    Published
    HighCVSS 8.1 EPSS 1.7%

    cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip fil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.