CVE-2026-62985
1 advisory.
npm/request-filtering-agent CVE-2026-62985: high 7.5, EPSS 0.46%
request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process
Action: Upgrade request-filtering-agent to 3.2.1 or later.
npm i request-filtering-agent@3.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.1 | - |
Fixed versions
| 3.2.1 |
Sources
- osv: GHSA-r3r9-wp5j-pq5g
- https://github.com/azu/request-filtering-agent/security/advisories/GHSA-r3r9-wp5j-pq5g
- https://github.com/azu/request-filtering-agent/commit/9d12561064524807fc399158eaa5bd7a40dd8cd0
- https://github.com/azu/request-filtering-agent
- https://github.com/azu/request-filtering-agent/releases/tag/v3.2.1
CVE-2026-62985 · published · modified · JSON