Denial of Service in https-proxy-agent

GHSA-8g7p-74h8-hg48 · CVE-2018-3739 · 갱신 2026. 9. 10.

해야 할 일

https-proxy-agent: 2.2.0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
npm	https-proxy-agent	2.2.0

원문

Denial of Service in https-proxy-agent

Versions of https-proxy-agent before 2.2.0 are vulnerable to denial of service. This is due to unsanitized options (proxy.auth) being passed to Buffer().

Recommendation

Update to version 2.2.0 or later.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-3736
WEBhttps://github.com/TooTallNate/node-https-proxy-agent/commit/1c24219df87524e6ed973127e81f30801d658f07
WEBhttps://hackerone.com/reports/319532
PACKAGEhttps://github.com/TooTallNate/node-https-proxy-agent
ADVISORYhttps://github.com/advisories/GHSA-8g7p-74h8-hg48
WEBhttps://www.npmjs.com/advisories/593

오늘 목록으로

Denial of Service in https-proxy-agent (GHSA-8g7p-74h8-hg48) · Sieve