https-proxy-agent
NPM
Releases39
Frequency4 months 2 days
Last Release
An HTTP(s) proxy `http.Agent` implementation for HTTPS
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 2.2.0 | — | 6.4 MEDIUM | ||
https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the 'auth' parameter (e.g. JSON). | ||||