WS-2019-0060

All versions of redbird have a vulnerable default configuration of allowing TLS 1.0 connections on lib/proxy.js. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable...

Malicious code in tg-redbird (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bdac7467e1d835aecf58e3cfebc472a5db3afa8109ad93f30ff7f6e020e09 Any computer that has this package installed or running should be considered fully compromised. All...

Malware in tg-redbird

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47351 Malicious code in tg-redbird (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bdac7467e1d835aecf58e3cfebc472a5db3afa8109ad93f30ff7f6e020e09 Any computer that has this package installed or running should be considered fully compromised. All...

@skeleton/traffic (>=0.1.0, <=0.1.1), @vibe-reporting/core (>=1.0.14, <=1.2.5) +22 more potentially affected by unknown CVE via redbird (>=0.4.14, <=0.8.0)

redbird NPM version =0.4.14, =0.1.0, =1.0.14, =1.0.20, =1.0.2, =1.0.5, =1.0.8, =1.0.16, =1.0.0, =1.1.12, =1.1.60 - evoxy 0.0.1 - http-socket-proxy-router 0.0.1 - incremental-compiler 0.0.1 - kenjutsuui 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8948-FFC6-JG52...

GHSA-8948-FFC6-JG52 Insecure Default Configuration in redbird

Versions of redbird prior to 0.9.1 have a vulnerable default configuration of allowing TLS 1.0 connections on lib/proxy.js. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable. Recommendation Upgrade to version 0.9.1 or later...

Insecure Default Configuration in redbird

Versions of redbird prior to 0.9.1 have a vulnerable default configuration of allowing TLS 1.0 connections on lib/proxy.js. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable. Recommendation Upgrade to version 0.9.1 or later...

PT-2019-20026

Name of the Vulnerable Software and Affected Versions redbird versions prior to 0.9.1 Description The issue is related to a vulnerable default configuration that allows TLS 1.0 connections on the lib/proxy.js file. TLS 1.0 is deprecated and vulnerable. The package does not provide an option to...

Insecure Default TLS Configuration

redbird uses an insecure default configuration for TLS. It allows TLS 1.0 connections on lib/proxy.js, which has been deprecated and known to contain security vulnerabilities...

Insecure Default Configuration

Overview Versions of redbird prior to 0.9.1 have a vulnerable default configuration of allowing TLS 1.0 connections on lib/proxy.js. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable. Recommendation Upgrade to version 0.9.1 or later. References - GitHub ...