GitHub Advisoryadvisory · npm

GHSA-8w57-jfpm-945m Denial of Service in http-proxy-agent

HIGH Published 2019-06-11 Modified 2023-04-11 Official page ↗
Ecosystem
npm
Packages
http-proxy-agent
Severity
High
Weaknesses
CWE-400
Reviewed
2019-06-11

Affected packages

• npm http-proxy-agent: < 2.1.0 → fixed in 2.1.0

Description

Versions of `http-proxy-agent` before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to `Buffer`. An attacker may leverage these unsanitized options to consume system resources. Recommendation Update to version 2.1.0 or later.

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References