Skip to content

Vendor

mystem3 project vulnerabilities

1 published CVE affecting mystem3 project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of mystem3 project alerts

Products

Latest mystem3 project CVEs

Newest publication first

  1. CVE-2016-10626 Downloads Resources over HTTP in mystem3

    Published
    HighCVSS 8.1 EPSS 1.6%

    mystem3 is a NodeJS wrapper for the Yandex MyStem 3. mystem3 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the at...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.