CVE-2016-10534

—

CVSS 3.0

5.9 medium

EPSS

<1%p59

Published

May 31, 2018 (May 31, 2018)

Modified

Jun 17, 2026

Description

electron-packager is a command line tool that packages Electron source code into `.app` and `.exe` packages. along with Electron. The `--strict-ssl` command line option in electron-packager >= 5.2.1 =6.0.0 <= 6.0.2 defaults to false if not explicitly set to true. This could allow an attacker to perform a man in the middle attack.

Vendors: electron-packager project
Products: electron-packager
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.