Description
pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/213
Related Vulnerabilities
CVE-2022-48216 Vulnerability in npm package @uniswap/universal-router
CVE-2020-21176 Vulnerability in npm package thinkjs
CVE-2020-13961 Vulnerability in npm package strapi
CVE-2021-32850 Vulnerability in npm package @claviska/jquery-minicolors
CVE-2015-7501 Vulnerability in maven package org.apache.commons:commons-collections4