dwebp-bin@0.2.0 vulnerabilities

dwebp wrapper that makes it seamlessly available as a local dependency

Direct Vulnerabilities

Known vulnerabilities in the dwebp-bin package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Man in the Middle (MitM)

dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG.

Affected versions of this package are vulnerable to Man in the Middle (MitM) due to downloading resources over an insecure protocol. Without a secure connection, it is possible for an attacker to intercept this connection and alter the packages received. In serious cases, this may even lead to Remote Code Execution (RCE) on your host server.

How to fix Man in the Middle (MitM)?

Upgrade dwebp-bin to version 1.0.0 or higher.