Redis-srvr Node Module (Hackerone) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-04. Vendor: Hackerone.

CVEs of Redis-srvr Node Module

• CVE-2016-10639 - CVSS 8.1 (high), 2018-06-04: redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible…