Skip to content

Product

https-proxy-agent project https-proxy-agent vulnerabilities

1 published CVE affecting https-proxy-agent project https-proxy-agent, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest https-proxy-agent project https-proxy-agent CVEs

Newest publication first

  1. CriticalCVSS 9.1 EPSS 1.7%

    https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the 'auth' parameter (e.g. JSON).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.