Description
ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/249
Related Vulnerabilities
CVE-2022-25352 Vulnerability in npm package libnested
CVE-2016-10520 Vulnerability in npm package jadedown
CVE-2020-7709 Vulnerability in npm package json-pointer
CVE-2019-18212 Vulnerability in maven package org.lsp4xml:org.eclipse.lsp4xml.extensions.web
CVE-2014-9970 Vulnerability in maven package org.jasypt:jasypt