Description
sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/256
Related Vulnerabilities
CVE-2020-5245 Vulnerability in maven package io.dropwizard:dropwizard-validation
CVE-2021-43306 Vulnerability in maven package org.webjars:jquery-validation
CVE-2020-7620 Vulnerability in npm package pomelo-monitor
CVE-2017-8045 Vulnerability in maven package org.springframework.amqp:spring-amqp
CVE-2022-41929 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore