unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 10.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
CWE-310 - Cryptographic Issues
Cryptographic issues is a category of weaknesses related to the design and implementation of the confidentiality and integrity of data. If not addressed, the weaknesses in this category can lead to data quality degradation.