npm proxy vulnerabilities

Latest npm proxy CVEs

Newest publication first

1. CVE-2023-2968 Undefined variable usage in npm package "proxy" leads to remote denial of service

   Published 2023-05-30

   High·CVSS 7.5 EPSS 1.5%

   A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.