Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-8948-ffc6-jg52

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8948-ffc6-jg52

Insecure Default Configuration in redbird Versions of `redbird` prior to 0.9.1 have a vulnerable default configuration of allowing TLS 1.0 connections on `lib/proxy.js`. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable. ## Recommendation Upgrade to version 0.9.1 or later.

gitlab/npm/redbird/GMS-2019-50

Insecure Default Configuration in redbird Versions of `redbird` have a vulnerable default configuration of allowing TLS connections on `lib/proxy.js`. The package does not provide an option to disable TLS which is deprecated and vulnerable. Upgrade to or later.