Skip to content

Product

npm http-proxy-agent vulnerabilities

2 published CVES affecting npm http-proxy-agent, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest npm http-proxy-agent CVEs

Newest publication first

  1. CVE-2019-10196 Resource Exhaustion Denial of Service in http-proxy-agent

    Published
    CriticalCVSS 9.8 EPSS 1.4%

    A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposur...

  2. GHSA-8w57-jfpm-945m Denial of Service in http-proxy-agent

    Published
    Unknown

    Versions of http-proxy-agent before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to Buffer. An attacker may leverage these unsanitized options to consume system resources. Recommendation Update to version 2.1.0 or lat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.