CVE-2016-10578

—

CVSS 3.0

8.1 high

EPSS

<1%p46

Published

May 29, 2018 (May 29, 2018)

Modified

Jun 17, 2026

Description

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

Vendors: unicode project
Products: unicode
Weakness: CWE-311, CWE-310
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.