Field Assessment
AI analysis pending.
CVE
CVE-2016-10652
Severity
HIGH
CVSS
8.1
EPSS
0.55%
Original Filing — NVD Description
prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.