https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:09:09.040744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-24663 cnvd-2018-24663 2026-10-12T06:09:09.101495+00:00 cnvd-2018-24663 https://cve.radiocsirt.org/vuln/euvd-2026-180864 EUVD-2026-180864 2026-10-12T06:09:09.101535+00:00 EUVD-2026-180864 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16041 fkie_cve-2017-16041 2026-10-12T06:09:09.101549+00:00

ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.

 https://cve.radiocsirt.org/vuln/ghsa-w23f-f3c5-r9qh GHSA-w23f-f3c5-r9qh — ikst Downloads Resources over HTTP 2026-10-12T06:09:09.101577+00:00

Affected: npm: ikst

Affected versions of `ikst` insecurely download resources over HTTP.

In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of the package itself, it ranges from being able to read sensitive information all the way up to and including remote code execution.

## Recommendation

Upgrade to version 1.1.2 or greater.

 https://cve.radiocsirt.org/vuln/gsd-2017-16041 gsd-2017-16041 2026-10-12T06:09:09.101605+00:00 gsd-2017-16041