CVE-2016-10616: Openframe-Image Project Openframe-Image

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

• Openframe-Image Project Openframe-Image: up to and including 0.2.0

Published 2018-06-01. Last modified 2026-06-17.