proxy.js project vulnerabilities

Products

• proxy.js 1

Latest proxy.js project CVEs

Newest publication first

1. CVE-2017-16076 Hijacked Environment Variables in proxy.js

   Published 2018-06-07

   High·CVSS 7.5 EPSS 1.1%

   proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.