Skip to content
OpenAdvisories

Package · npm

unicode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2016-10578

    Downloads Resources over HTTP in unicode

    unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne unicode node module unicode npm