Skip to content

Product

cue-sdk-node project cue-sdk-node vulnerabilities

1 published CVE affecting cue-sdk-node project cue-sdk-node, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest cue-sdk-node project cue-sdk-node CVEs

Newest publication first

  1. CVE-2016-10590 Downloads Resources over HTTP in cue-sdk-node

    Published
    HighCVSS 8.1 EPSS 1.7%

    cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip fil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.