GHSA-8w57-jfpm-945m
Denial of Service in http-proxy-agent
Versions of http-proxy-agent before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to Buffer. An attacker may leverage these unsanitized options to consume system resources.
Recommendation
Update to version 2.1.0 or later.
What each source reports
GitHub AdvisoriesNo score
Denial of Service in http-proxy-agent
Versions of http-proxy-agent before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to Buffer. An attacker may leverage these unsanitized options to consume system resources.
Recommendation
Update to version 2.1.0 or later.
- Record
GHSA-8w57-jfpm-945m- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVNo score
Denial of Service in http-proxy-agent
Versions of http-proxy-agent before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to Buffer. An attacker may leverage these unsanitized options to consume system resources.
Recommendation
Update to version 2.1.0 or later.
- Record
GHSA-8w57-jfpm-945m- Weakness
- CWE-400
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
http-proxy-agentnpm | before 2.1.0 | 2.1.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-8w57-jfpm-945m is a vulnerability with no CVSS score yet in http-proxy-agent, published June 11, 2019. No source lists public exploit code. Fixed in http-proxy-agent 2.1.0.