https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 09:34:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-21734 cnvd-2018-21734 https://cve.radiocsirt.org/vuln/cnvd-2018-21734 https://cve.radiocsirt.org/vuln/euvd-2026-185754 EUVD-2026-185754 https://cve.radiocsirt.org/vuln/euvd-2026-185754 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3739 <p>https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the &#39;auth&#39; parameter (e.g. JSON).</p> <p>https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the &#39;auth&#39; parameter (e.g. JSON).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3739 https://cve.radiocsirt.org/vuln/ghsa-8g7p-74h8-hg48 <p><strong>Affected:</strong> npm: https-proxy-agent</p> <p>Versions of `https-proxy-agent` before 2.2.0 are vulnerable to denial of service. This is due to unsanitized options (proxy.auth) being passed to `Buffer()`.</p> <p>## Recommendation</p> <p>Update to version 2.2.0 or later.</p> <p><strong>Affected:</strong> npm: https-proxy-agent</p> <p>Versions of `https-proxy-agent` before 2.2.0 are vulnerable to denial of service. This is due to unsanitized options (proxy.auth) being passed to `Buffer()`.</p> <p>## Recommendation</p> <p>Update to version 2.2.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-8g7p-74h8-hg48 https://cve.radiocsirt.org/vuln/gsd-2018-3739 gsd-2018-3739 https://cve.radiocsirt.org/vuln/gsd-2018-3739