Description
cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/197
Related Vulnerabilities
CVE-2022-4725 Vulnerability in maven package com.amazonaws:aws-android-sdk-core
CVE-2020-15930 Vulnerability in npm package joplin
CVE-2019-9658 Vulnerability in maven package com.puppycrawl.tools:checkstyle
CVE-2020-28865 Vulnerability in maven package com.github.kfcfans:powerjob
CVE-2022-0671 Vulnerability in maven package org.eclipse.lemminx:lemminx-parent