CVE-2016-10610: Unicode Unicode-JSON

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

• Unicode Unicode-JSON: before 2.0.0 (fixed in 2.0.0)

Published 2018-06-01. Last modified 2026-06-17.