Description
ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/184
Related Vulnerabilities
CVE-2018-8009 Vulnerability in maven package org.apache.hadoop:hadoop-common
CVE-2019-18818 Vulnerability in npm package strapi
CVE-2016-3081 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2017-16046 Vulnerability in npm package mariadb
CVE-2018-12536 Vulnerability in maven package org.eclipse.jetty:jetty-server