Unicode Project Unicode vulnerabilities

1 vulnerability

Known vulnerabilities in Unicode Project Unicode, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2016-10578hackeroneunicode node module+2
EPSS score
0.57%
unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.