CVE-2016-10610

CVE-2016-10610 describes a critical vulnerability in the unicode-json library, affecting versions prior to 2.0.0. The library's practice of downloading data resources over unencrypted HTTP makes it susceptible to Man-in-the-Middle (MITM) attacks. With a CVSS score of 8.1 (High), a successful attack could lead to high confidentiality, integrity, and availability impacts, as an attacker could inject malicious data during resource downloads. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.