Description
unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/206
Related Vulnerabilities
CVE-2018-13003 Vulnerability in maven package net.opentsdb:opentsdb
CVE-2020-2293 Vulnerability in maven package org.jenkins-ci.plugins:persona
CVE-2023-49210 Vulnerability in npm package openssl
CVE-2022-42466 Vulnerability in maven package org.apache.isis.commons:isis-commons
CVE-2019-10364 Vulnerability in maven package org.jenkins-ci.plugins:ec2