Skip to content
OpenAdvisories

Package · npm

https-proxy-agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 6.1
    GHSA-pc5p-h8pf-mvwp

    Machine-In-The-Middle in https-proxy-agent

    Versions of `https-proxy-agent` prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access t…

    https-proxy-agent npm