description: prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
problem types: Missing Encryption of Sensitive Data (CWE-311)
affected:
{
product: prebuild-lwip node module
vendor: HackerOne
versions:
status: affected, version: All versions
}