Description
sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/256
Related Vulnerabilities
CVE-2021-43142 Vulnerability in maven package com.wutka:jox
CVE-2018-3757 Vulnerability in npm package pdf-image
CVE-2017-16081 Vulnerability in npm package cross-env.js
CVE-2021-23341 Vulnerability in npm package prismjs
CVE-2021-25738 Vulnerability in maven package io.kubernetes:client-java-parent