CVE-2016-10578

HIGH · CVSS 8.1 EPSS 0.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-10578

Severity

HIGH

CVSS

8.1

EPSS

0.58%

Original Filing — NVD Description

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.