dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `[email protected]`, network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victim of a man-in-the-middle (MITM) attack. The network request was upgraded to HTTPS in version `1.0.1`. There are no workarounds, but some precautions include not sending any sensitive information and carefully verifying the API response before saving it.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-04-04T22:10:29.200Z
Updated: 2024-08-26T20:27:25.984Z
Reserved: 2024-03-29T14:16:31.900Z
Link: CVE-2024-31206
Vulnrichment
Updated: 2024-08-02T01:46:04.547Z
NVD
Status : Awaiting Analysis
Published: 2024-04-04T23:15:15.897
Modified: 2024-11-21T09:13:02.270
Link: CVE-2024-31206
Redhat
No data.