Description
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.
Remediation
References
https://nodesecurity.io/advisories/279
Related Vulnerabilities
CVE-2022-1233 Vulnerability in maven package org.webjars.bower:urijs
CVE-2020-28424 Vulnerability in npm package s3-kilatstorage
CVE-2019-19771 Vulnerability in npm package bconi
CVE-2019-9514 Vulnerability in maven package io.netty:netty-codec-http2
CVE-2018-1000665 Vulnerability in maven package org.webjars.bower:dojo