Skip to content
OpenAdvisories

Package · npm

http-proxy-agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2019-10196

    Resource Exhaustion Denial of Service in http-proxy-agent

    A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resou…

    http-proxy-agent npm
  • High —
    GHSA-8w57-jfpm-945m

    Denial of Service in http-proxy-agent

    Versions of `http-proxy-agent` before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to `Buffer`. An attacker may leverage these unsanitized options to consume system resources. ## Recommendation Up…

    http-proxy-agent npm