CVE-2016-10592

jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

• CWE-311
• CWE-310

• https://github.com/jser/stat-js/blob/master/data/url-mapping.jsThird Party Advisory
• https://nodesecurity.io/advisories/188Third Party Advisory
• https://github.com/jser/stat-js/blob/master/data/url-mapping.jsThird Party Advisory
• https://nodesecurity.io/advisories/188Third Party Advisory

Published

Jun 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10587wasdk is a toolkit for creating WebAssembly modules. wasdk d…
• CVE-2016-10588nw is an installer for nw.js. nw downloads zipped resources …
• CVE-2016-10589selenium-binaries downloads Selenium related binaries for yo…
• CVE-2016-1059Use-after-free vulnerability in Adobe Reader and Acrobat bef…
• CVE-2016-10590cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-s…
• CVE-2016-10591Prince is a Node API for executing XML/HTML to PDF renderer …
• CVE-2016-10593ibapi is an Interactive Brokers API addon for NodeJS. ibapi …
• CVE-2016-10594ipip is a Node.js module to query geolocation information fo…
• CVE-2016-10595jdf-sass is a fork from node-sass, jdf use only. jdf-sass do…8.1
• CVE-2016-10596imageoptim is a Node.js wrapper for some images compression …
• CVE-2016-10597cobalt-cli downloads resources over HTTP, which leaves it vu…5.9
• CVE-2016-10598arrayfire-js is a module for ArrayFire for the Node.js platf…