CVE-2016-10680

8.1 highEPSS 0.7%

adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWEs: CWE-310, CWE-311
Published: 2018-05-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adamvr-geoip-lite_project:adamvr-geoip-lite

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-h2jv-5v3f-7m7j	npm	adamvr-geoip-lite	>=0.0.0	no fix published

References

https://nodesecurity.io/advisories/283
https://nodesecurity.io/advisories/283

Check your stack JSON