Description
A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | proxy | < 2.1.1 | 2.1.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | proxy | >= 2.0.0, < 2.1.1 | 2.1.1 | GHSA-mj6p-3pc9-wf5m |