CVE-2016-10652: Prebuild-Lwip Project Prebuild-Lwip

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

Published 2018-06-04. Last modified 2026-06-17.