Description
jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://github.com/jser/stat-js/blob/master/data/url-mapping.js
https://nodesecurity.io/advisories/188
Related Vulnerabilities
CVE-2017-16017 Vulnerability in npm package npm
CVE-2019-10405 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2019-10754 Vulnerability in maven package org.apereo.cas:cas-server-core-services-api
CVE-2015-7940 Vulnerability in maven package org.bouncycastle:bcprov-jdk15
CVE-2020-28452 Vulnerability in maven package com.softwaremill.akka-http-session:core_2.13