3 matches found
CVE-2016-10610
unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...
8.1CVSS8AI score0.00597EPSS
SaveExploits0References1
CVE-2016-10610
unicode-json before 2.0.0 downloads data resources over HTTP, enabling potential MitM manipulation/read of resources and, in some advisories, remote code execution risks. The affected component is the unicode-json package (pre-2.0.0) and the remediation advised across sources is to upgrade to ver...
8.1CVSS7.9AI score0.00597EPSS
SaveExploits0References1Affected Software1
20