npm/https-proxy-agent: medium 6.1
Machine-In-The-Middle in https-proxy-agent
Action: Upgrade https-proxy-agent to 2.2.3 or later.
npm i https-proxy-agent@2.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.3 | - |
Fixed versions
| 2.2.3 |
Sources
- osv: GHSA-pc5p-h8pf-mvwp
- https://github.com/TooTallNate/node-https-proxy-agent/commit/36d8cf509f877fa44f4404fce57ebaf9410fe51b
- https://hackerone.com/reports/541502
- https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131
- https://www.npmjs.com/advisories/1184
published · modified · JSON