redbird@0.3.4 vulnerabilities

A reverse proxy with support for dynamic tables

  • latest version

    1.0.2

  • latest non vulnerable version

  • first published

    10 years ago

  • latest version published

    9 months ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the redbird package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Insufficient Validation

    redbird is a complete library to build dynamic reverse proxies with the speed and robustness of http-proxy.

    Affected versions of this package are vulnerable to Insufficient Validation. There is no option in lib/proxy.js which would allow for disabling TLS1.0 connections, which are considered to be vulnerable and deprecated.

    How to fix Insufficient Validation?

    Upgrade redbird to version 0.9.1 or higher.

    <0.9.1