React Native — CWE-311

All Frameworks › React Native › CWE-311

1 CVEs categorized as CWE-311 — Missing Encryption of Sensitive Data in React Native.

CVE-2016-10697—2016

react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources w…