Description
bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/211
Related Vulnerabilities
CVE-2022-36098 Vulnerability in maven package org.xwiki.platform:xwiki-platform-mentions-ui
CVE-2019-15482 Vulnerability in npm package selectize-plugin-a11y
CVE-2020-13110 Vulnerability in npm package kerberos
CVE-2019-6283 Vulnerability in npm package node-sass
CVE-2023-40341 Vulnerability in maven package io.jenkins.blueocean:blueocean