Skip to content
OpenAdvisories

Package · npm

tunnel-agent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-xc7v-wxcw-j472

    Memory Exposure in tunnel-agent

    Versions of `tunnel-agent` before 0.6.0 are vulnerable to memory exposure. This is exploitable if user supplied input is provided to the auth value and is a number. Proof-of-concept: ```js require('request')({ method: 'GET', uri: 'http://www.example.com', tun…

    tunnel-agent npm