CVE-2017-16041

5.9 mediumEPSS 0.6%

Medium (5.9) in ikst project ikst. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in ikst 1.1.2.

ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.

Severity

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWEs: CWE-319, CWE-311
Published: 2018-06-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-w23f-f3c5-r9qh	npm	ikst	<1.1.2	1.1.2