Skip to content

Vendor

nodewebkit project vulnerabilities

1 published CVE affecting nodewebkit project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of nodewebkit project alerts

Products

Latest nodewebkit project CVEs

Newest publication first

  1. CVE-2016-10580 Downloads Resources over HTTP in nodewebkit

    Published
    HighCVSS 8.1 EPSS 1.6%

    nodewebkit is an installer for node-webkit. nodewebkit downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the atta...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.