description: unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
problem types: Missing Encryption of Sensitive Data (CWE-311)
affected:
{
product: unicode node module
vendor: HackerOne
versions:
status: affected, version: < 9.0.0
}