Approved changes feed: RSS · Atom

cpe:2.3:a:dalekjs:dalekjs:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorDalekjs (c5bd7c8e-63eb-5500-a52a-0b678da4b88e)
ProductDalekjs (8ddb164e-ef6a-5778-abf5-15afcbd05239)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/dalekjs/dalek purl2cpe 2026-06-01 10:14:40.151847

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10612 vulnerable 2026-06-08 05:07:25.415562 Details available
dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
Published: 2018-06-01T18:00:00.000Z
Updated: 2024-09-17T02:37:40.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10605 vulnerable 2026-06-08 05:07:25.400848 Details available
dalek-browser-ie is Internet Explorer bindings for DalekJS. dalek-browser-ie downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
Published: 2018-06-01T18:00:00.000Z
Updated: 2024-09-17T04:24:06.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10604 vulnerable 2026-06-08 05:07:25.399631 Details available
dalek-browser-chrome is Google Chrome bindings for DalekJS. dalek-browser-chrome downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
Published: 2018-06-01T18:00:00.000Z
Updated: 2024-09-17T02:47:41.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10584 vulnerable 2026-06-08 05:07:25.365958 Details available
dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
Published: 2018-05-29T20:00:00.000Z
Updated: 2024-09-16T16:53:28.723Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.