jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10592.json"