Security Advisory
CVE-2016-10594
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.