ipfs-inactive/npm-go-ipfs-dep

ipfs-inactive/npm-go-ipfs-dep

Releases19
Frequency1 month 18 hours
Last Release
Stars16
DEPRECATED by https://github.com/ipfs/npm-go-ipfs

CVE History

CVEPublishedCVSS v3CVSS v2
6.8 MEDIUM

During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.