https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T09:34:35.240830+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-21734 cnvd-2018-21734 2026-10-21T09:34:35.244645+00:00 cnvd-2018-21734 https://cve.radiocsirt.org/vuln/euvd-2026-185754 EUVD-2026-185754 2026-10-21T09:34:35.244694+00:00 EUVD-2026-185754 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3739 fkie_cve-2018-3739 2026-10-21T09:34:35.244717+00:00

https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the 'auth' parameter (e.g. JSON).

 https://cve.radiocsirt.org/vuln/ghsa-8g7p-74h8-hg48 GHSA-8g7p-74h8-hg48 — Denial of Service in https-proxy-agent 2026-10-21T09:34:35.244763+00:00

Affected: npm: https-proxy-agent

Versions of `https-proxy-agent` before 2.2.0 are vulnerable to denial of service. This is due to unsanitized options (proxy.auth) being passed to `Buffer()`.

## Recommendation

Update to version 2.2.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-3739 gsd-2018-3739 2026-10-21T09:34:35.244805+00:00 gsd-2018-3739