← CVE Intelligence

CVE-2016-10578

HackerOne / unicode node module PUBLISHED

Description (CNA)

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected (CNA)

Vendor / productVersions
HackerOne / unicode node moduleaffected < 9.0.0

CWE

CWE-311

References

ADP enrichment

CVE

No English description supplied.