Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Advisories for Npm/Jser-Stat package
2019
2016
Downloads Resources over HTTP
jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.