Description
openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/218
Related Vulnerabilities
CVE-2017-7673 Vulnerability in maven package org.apache.openmeetings:openmeetings-web
CVE-2018-3758 Vulnerability in npm package express-cart
CVE-2023-25826 Vulnerability in maven package net.opentsdb:opentsdb
CVE-2018-14637 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2016-4436 Vulnerability in maven package org.apache.struts:struts2-core