tiny-json-http is a minimalist HTTP client for GET and POSTing JSON payloads.
Affected versions of this package are vulnerable to Man-in-the-Middle (MitM) attacks. It contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.
tiny-json-http to version 7.0.0 or higher.