Skip to content
OpenAdvisories

Product · HackerOne

unicode node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10578

    Downloads Resources over HTTP in unicode

    unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

    HackerOne unicode node module unicode npm