Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
Advisories for Npm/Unicode-Json package
2019
2017
Downloads Resources over HTTP
unicode-json downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.