Http-Proxy-Agent Project Http-Proxy-Agent vulnerabilities

1 known vulnerability affecting http-proxy-agent_project/http-proxy-agent.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2019-10196CRITICALCVSS 9.8fixed in 2.1.02021-03-19

CVE-2019-10196 [CRITICAL] CWE-665 CVE-2019-10196: A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent pas A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker co