Описание
Insecure Default Configuration in redbird
Versions of redbird prior to 0.9.1 have a vulnerable default configuration of allowing TLS 1.0 connections on lib/proxy.js. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable.
Recommendation
Upgrade to version 0.9.1 or later.
Пакеты
Наименование
redbird
npm
Затронутые версииВерсия исправления
<= 0.9.0
Отсутствует
4.2 Medium
CVSS3
Дефекты
CWE-20
4.2 Medium
CVSS3
Дефекты
CWE-20