pac-resolver
NPM
Releases28
Frequency5 months 2 weeks
Last Release
Generates an asynchronous resolver function from a PAC file
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 5.0.0 | 8.1 HIGH | 7.5 HIGH | ||
This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. **NOTE:** The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer. | ||||