Skip to content

Vendor

mystem-fix project vulnerabilities

1 published CVE affecting mystem-fix project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of mystem-fix project alerts

Products

Latest mystem-fix project CVEs

Newest publication first

  1. CVE-2016-10698 Downloads Resources over HTTP in mystem-fix

    Published
    HighCVSS 8.1 EPSS 1.7%

    mystem-fix is a node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem-fix downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an at...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.