CVE-2016-10634

CVE-2016-10634 affects the scala-standalone-bin project, a binary wrapper for ScalaJS, due to its insecure practice of downloading binary resources over HTTP. This vulnerability allows for potential Man-in-the-Middle (MITM) attacks, enabling an attacker to swap legitimate binaries with malicious ones, leading to remote code execution (RCE). Rated with a CVSS score of 8.1 (HIGH), the attack vector is network-based with high impact on confidentiality, integrity, and availability, though requiring high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.