CVE-2016-10641: Node-Bsdiff-Android Project Node-Bsdiff-Android

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

• Node-Bsdiff-Android Project Node-Bsdiff-Android: up to and including 0.1.5

Published 2018-06-04. Last modified 2026-06-17.