Description
unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/161
Related Vulnerabilities
CVE-2016-10697 Vulnerability in npm package react-native-baidu-voice-synthesizer
CVE-2021-21181 Vulnerability in npm package electron
CVE-2019-16772 Vulnerability in maven package org.webjars.npm:serialize-javascript
CVE-2016-10621 Vulnerability in npm package fibjs
CVE-2022-0671 Vulnerability in maven package org.eclipse.lemminx:lemminx-parent