Description
unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/206
Related Vulnerabilities
CVE-2014-3741 Vulnerability in npm package printer
CVE-2020-15256 Vulnerability in npm package object-path
CVE-2015-0226 Vulnerability in maven package org.apache.wss4j:wss4j-ws-security-dom
CVE-2020-5413 Vulnerability in maven package org.springframework.integration:spring-integration
CVE-2023-1108 Vulnerability in maven package io.undertow:undertow-core