Description
pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/213
Related Vulnerabilities
CVE-2021-21141 Vulnerability in maven package org.webjars.npm:electron
CVE-2020-28480 Vulnerability in maven package org.webjars.npm:jointjs
CVE-2020-11072 Vulnerability in npm package slpjs
CVE-2016-9606 Vulnerability in maven package org.jboss.resteasy:resteasy-yaml-provider
CVE-2017-1000427 Vulnerability in maven package org.webjars:marked