description: geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
problem types: Missing Encryption of Sensitive Data (CWE-311)
affected:
{
product: geoip-lite-country node module
vendor: HackerOne
versions:
status: affected, version: <1.1.4
}