Description
cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/197
Related Vulnerabilities
CVE-2022-25853 Vulnerability in npm package semver-tags
CVE-2016-10735 Vulnerability in maven package fr.norad.bootstrap:bootstrap
CVE-2022-29647 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2020-26272 Vulnerability in npm package electron
CVE-2016-10735 Vulnerability in maven package ua.mobius.media:bootstrap