Description
ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.
Remediation
References
https://nodesecurity.io/advisories/249
Related Vulnerabilities
CVE-2022-31170 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts
CVE-2022-25872 Vulnerability in npm package fast-string-search
CVE-2021-23371 Vulnerability in npm package chrono-node
CVE-2020-2240 Vulnerability in maven package org.jenkins-ci.plugins:database
CVE-2019-12041 Vulnerability in maven package org.webjars.bowergithub.jonschlinkert:remarkable