jser-stat project vulnerabilities

Products

• jser-stat 1

Latest jser-stat project CVEs

Newest publication first

1. CVE-2016-10592 Downloads Resources over HTTP in jser-stat

   Published 2018-06-01

   High·CVSS 8.1 EPSS 0.62%

   jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.