2018

i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from t

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and n

Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can

Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme". In versions <=0.9.11, http-signature s

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled v

augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malic

html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '

An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.1

react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synt

windows-latestchromedriver downloads the latest version of chromedriver.exe. windows-latestchromedriver downloads binary

The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings. npm-test-sqlite3-trunk downloads

IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel t

The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject.

IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect atta

alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2

pm2-kafka is a PM2 module that installs and runs a kafka server pm2-kafka downloads binary resources over HTTP, which le

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable

windows-seleniumjar is a module that downloads the Selenium Jar file windows-seleniumjar downloads binary resources over

openframe-ascii-image module is an openframe plugin which adds support for ascii images via fim. openframe-ascii-image d

The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources ov

Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP,

windows-selenium-chromedriver is a module that downloads the Selenium Jar file. windows-selenium-chromedriver downloads

fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vul

pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it

healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP

arcanist downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote c

serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MIT

google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools g

rs-brightcove is a wrapper around brightcove's web api rs-brightcove downloads source file resources over HTTP, which le

libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, whic

ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves

cloudpub-redis is a module for CloudPub: Redis Backend cloudpub-redis downloads binary resources over HTTP, which leaves

mystem-wrapper is a Yandex mystem app wrapper module. mystem-wrapper downloads binary resources over HTTP, which leaves

windows-seleniumjar-mirror downloads the Selenium Jar file windows-seleniumjar-mirror downloads binary resources over HT

soci downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remot

libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vuln

selenium-portal is a Selenium Testing Framework selenium-portal downloads binary resources over HTTP, which leaves it vu

herbivore is a packet sniffing and crafting library. Built on libtins herbivore 0.0.3 and below download binary resource

mystem is a Node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem downloads binary resources over HTTP

wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, whic

tomita is a node wrapper for Yandex Tomita Parser tomita downloads binary resources over HTTP, which leaves it vulnerabl

phantomjs-cheniu is a Headless WebKit with JS API phantomjs-cheniu downloads binary resources over HTTP, which leaves it

fis-parser-sass-bin a plugin for fis to compile sass using node-sass-binaries. fis-parser-sass-bin downloads binary reso

co-cli-installer downloads the co-cli module as part of the install process, but does so over HTTP, which leaves it vuln

qbs is a build tool that helps simplify the build process for developing projects across multiple platforms. qbs downloa

The clang-extra module installs LLVM's clang-extra tools. clang-extra downloads binary resources over HTTP, which leaves

sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

xd-testing is a testing library for cross-device (XD) web applications. xd-testing downloads binary resources over HTTP,

prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads

webdriver-launcher is a Node.js Selenium Webdriver Launcher. webdriver-launcher downloads binary resources over HTTP, wh