Product · HackerOne

unicode-json node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10610

Downloads Resources over HTTP in unicode-json

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

HackerOne unicode-json node module unicode-json npm

Jun 1, 2018