Description
node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/234
Related Vulnerabilities
CVE-2022-31151 Vulnerability in maven package org.webjars.npm:undici
CVE-2021-26291 Vulnerability in maven package org.apache.maven:apache-maven
CVE-2018-11012 Vulnerability in maven package cc.ryanc:halo
CVE-2019-18394 Vulnerability in maven package org.igniterealtime.openfire:xmppserver
CVE-2017-4974 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-server